This disclosure describes techniques that enable a service provider to synchronize public-private Internet protocol (IP) pairs between a central logging entity (CLE) server that attributes network traffic and network address translation NAT device that logs network traffic. The CLE server includes a communication protocol client communicatively coupled to a communication protocol host. The CLE server, in response to receiving a deregistration message from a registration protocol server, sends a clear request message comprising a private address via the communication protocol client. The deregistration message includes the private address. The NAT device includes the communication protocol host. The NAT device, in response to receiving the clear request message comprising the private address via the communication protocol host, clears a binding that maps the private address to a public address to prevent network address translation between the private address and the public address.