In the QlikView Server Session log, the Client Address is coming through as the webserver's IP for AJAX sessions.
The webserver is the server requesting the ticket, but is not the client.
The IP address written in the sessions log's "Client Address" tab is the IP address of the "client" machine connecting to the server on port 4747.
In the case of AJAX, the "Client Address" will be the IP address of the webserver machine.
If IE Plugin or Desktop is used then the IP address will be of the client machine hosting the desktop or IE (end-point).
For information on how to accurately locate the client IP address, see How to find the IP address of a QlikView client accessing documents .
Environment:
QlikView