Plugin uses cloudflare IP instead of actual visitor IP

  • Resolved dmitric

    (@dmitric)


    3 months ago

    Hello.

    I tried to pull up my website (logged out) and was presented with the page stating that I was prevented from accessing the website. When I checked the log my IP was shown as cloudflare ip. Why is Wordfence showing cloudflare IP instead of my actual IP?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @dmitric, thanks for getting in touch.

    Here, IPs that are being legitimately blocked are also being detected as the Cloudflare IP, so you and your visitors will probably be blocked as a result. For IP detection in Cloudflare, our “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.” option is explained here: https://www.wordfence.com/help/dashboard/options/#general-wordfence-options

    Take note of your own IP on your main device to make sure it matches the one you’re shown when changing the setting above: https://www.whatsmyip.org.

    If you need to regain access to your site before checking your settings, rename the /wp-content/plugins/wordfence plugin folder to “wordfence_bak” (without quotes). This should let you access and log into your site normally.

    Thanks,
    Peter.

    Thread Starter dmitric

    (@dmitric)

    Thank you @wfpeter . It solved the issue!

    • This reply was modified 3 months ago by dmitric.
    Plugin Support wfpeter

    (@wfpeter)

    That’s great news @dmitric, thanks for letting us know!

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.

Tags