False Blacklisted IP Address

I’ve just encountered a similar problem. The wordfence report ip address doesn’t match our domain ip address, but it says we’ve been blacklisted. I have a ticket that I just opened with wordfence.org.

I talked with wordfence and siteground. Wordfence says that we’ve been associated with a blacklisted ip address through cloudflare cdn we use (through siteground). Says that a cloudflare ip address is used by many sites, one of which had been marked as “malicious”, and so we got grouped in with them.

I ran a wordfence scan this AM, and I didn’t see the same problem (only a day after problem showed up) – Siteground says that Cloudflare could have already cleaned up the problem.

If the problem were to still be ongoing, they suggested that I contact Cloudflare to help resolve the issue – but fortunately, problem went away by itself.

Hi @tradersammy, thanks for your input on this ticket. We normally advise that the forum rules require a different topic per user, but I can see that this has resolved for you after conversation with your host and Cloudflare so that’s great news!

Did this also assist towards the problem @chromechris or are you still affected by the blacklist message? I can speak with our threat intelligence team to check into your IP if so.

Thanks,

Peter.

Hi Peter – just wanted to connect with @chromechris because I had almost same problem. Anyways, your wordfence colleague (on another ticket) said you were getting a spate of the same problems with other customers that same day. It’s not a problem with local IP, it’s a problem with Cloudflare shared IP. So I”m not sure if your team can help, unless they have some connections with the cloudflare company. Thanks.

If @chromechris is able to provide us with a Wordfence diagnostic, we can help confirm the IPs associated with the server and this block can be investigated. It may have been a temporary issue based on activity from another site using Cloudflare as mentioned above, or it may be an ongoing issue. If the scan no longer reports this issue, then that might confirm the temporary nature.

If the issue is still present, you can send a diagnostic report to wftest @ wordfence . com. You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Feel free to also send the uncensored message from the scan to the same email address, again with your forum username in the subject line.

Thanks again,

Peter.