Extract ip and user lookup from handler