wordfence logs IPs today differently…

  • Resolved sotnasonun

    (@sotnasonun)


    7 years, 4 months ago

    Not sure what happened since yesterday…
    Today I tried to access my website and it was blocked, even for me as administrator.
    It opened a wordfence page stating that the site was blocked due to security reasons and to gain access again to insert the email address.
    I guess for some odd reason my firefox from my mobile tried to login several times and it was blocked… Not sure how and why…

    I entered my email and regain access to the website, So far so good.

    Now I’m checking the IP’s on the wordfence dashboard and for some reasons, today’s logged IPs are from my hosting company instead of my real IP.
    I attach a printscreen below with that information.

    https://www.dropbox.com/s/7vzrhowq9zr8s19/wordfence.jpg?dl=0

    Username 1 – was a login today via my smartphone through my mobile carrier.
    Username 2 – was a login today via my internet provider from my PC
    Username 2 – previous IP – was logins made previously via my internet provider from my PC

    The logs from today are using the same IP, which my hosting provider (namecheap.com).

    Not sure if it’s supposed to be that way or if anything changed…

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter sotnasonun

    (@sotnasonun)

    Just a small update, wordfence is logging all traffic with that same IP, 198.54.115.215.

    Thats why wordfence blocked the site for security reasons.

    Any ideas about what is happening?

    Thread Starter sotnasonun

    (@sotnasonun)

    after some reading, I discovered that when changing the: How does Wordfence get IPs to:
    Use the X-forwarded f-For HTTP header option, The IPs appear correctly.
    However I get the misconfiguration message on top…

    This problem happened without notice and I haven’t changed the settings on wordfence.

    Can this happen because something changed within my hosting provider?

    Most likely your server provider configured a kind of HTTP proxy or load balancer on your server recently, that’s why you had to change the way Wordfence fetches the IPs.

    Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘wordfence logs IPs today differently…’ is closed to new replies.