unable to accurately detect ips

  • Resolved waylayer

    (@waylayer)


    4 years, 10 months ago

    hi, thank for your help.

    My web server is on a DMZ and was hacked, someone is creating malicious php archives on my webserver, installed wordfence and it works to delete all the malicious archives, but i was trying block the attacker ip but only got the same ip 192.168.200.1 for all the connections, that ip is from my gateway.

    i tried changing the option “How does Wordfence get IPs” to “Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result.” but no work, this is still showing me 192.168.200.1 . all the another options show the same ip.

    this is my diagnostic tab:

    REMOTE_ADDR	192.168.200.1	In use
CF-Connecting-IP	(not set)	
X-Real-IP	(not set)	
X-Forwarded-For	(not set)	Configured but not valid

    can u help me?

    • This topic was modified 4 years, 10 months ago by waylayer.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)

  • Hey @waylayer,

    Thanks for the information. Can you send me a Diagnostics report so I can get a better overview of your environment? Please navigate to Wordfence > Tools > Diagnostics. Here you can select SEND REPORT BY EMAIL. Please include your www.remarpro.com username and update this thread after you’ve sent it.

    Thanks,

    Gerroald

    Thread Starter waylayer

    (@waylayer)

    I have sent the report, thank you very much.

    Hey @waylayer,

    Thanks for the information.

    Even the Diagnostic report seems to have come from the host IP you mentioned. Can you share who you’re hosting with? Also, can you please reach out to them to assure that visitors’ IP addresses are being detected correctly and passed to the webserver?

    Please let me know what they say.

    Thanks,

    Gerroald

    Thread Starter waylayer

    (@waylayer)

    thank you,

    The webserver is private, I mean, we have our own server in the building.

    can you please reach out to them to assure that visitors’ IP addresses are being detected correctly and passed to the webserver?

    i will ask

    Hey @waylayer,

    Thanks for the update. Please do let me know what they say.

    Thanks,

    Gerroald

    Hey @waylayer,

    We haven’t heard back from you in a while, so I’ve gone ahead and marked this thread as resolved.

    Please feel free to open another thread if you’re still having issues with Wordfence.

    Thanks,

    Gerroald

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘unable to accurately detect ips’ is closed to new replies.