• Resolved lfeddern

    (@lfeddern)


    I am using Wordfence as when I allowed account registration on my site I got a lot of spam registrations.

    I am limiting the domains that can register so this isn’t a problem. The only thing is that when I use the “live traffic” function I see that there is attempts every few minutes for logins from the old spam accounts as well as attempts to register new accounts.

    When I try and block this ip it says I can’t as it is my ip address. however the ip address is in “Provo, United States” despite me being in the UK.

    Anyone know what is going and is there a way to stop it – I guess the constant requests are putting unnecessary strain on the server. I am confused! I scanned with wordfence and it only found some differences in the readme files in bbpress

    Thanks!

    https://www.ads-software.com/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR

    (@wfmattr)

    The IP address you’re seeing is probably a server at your hosting company or a “reverse proxy” that your site is using, so you might need to change a setting in Wordfence to match — do you know if you are using CloudFlare, or a reverse proxy like Varnish or nginx?

    The option is “How does Wordfence get IPs”, on the Wordfence Options page. Details on the choices are available here:
    How does Wordfence get IPs

    Once you set that option to match your site’s setup, you should see different IP addresses on the Live Traffic tab for different visitors, so that you can block the bad ones. (You’ll have to wait for new visits — it won’t update the old ones.) If you have another browser that isn’t logged into your site, you can visit the site from there, and should see your own IP, too.

    Let me know if this helps, or if you’re still having trouble.

    -Matt R

Viewing 1 replies (of 1 total)
  • The topic ‘spam registration and login attempts from my own ip address’ is closed to new replies.