Live Traffic – No data for some IPs

Are any of these IPs already blocked, either on the “Blocked IPs” page, or by a range that is entered on “Advanced Blocking”?

If not, can you check on the Wordfence Options page, and let us know what you have set for the four options under the “Live Traffic View” section? You can also check “Whitelisted IP addresses that bypass all rules” further down on the Options page, to make sure that a large range wasn’t unintentionally whitelisted.

-Matt R

Hi Matt,

This one particular IP is not blocked. It raised a flag because it’s activity was abnormally high. Of course, it’s gone from Top Consumers today. Under Options>Live Traffic View, all we have is this, checked, “Don’t log signed-in users with publishing access:”. Nothing Whitelisted.

Thanks,
Bill

Bill,

Do you use any reverse proxy like CloudFlare, Varnish, or (in some setups) nginx? And do you use any caching plugins?

Also, can you tell me what the bad IP was?

If you don’t want to post it here, you can email me — and if you have a copy of your access log that covers that time period, I could take a look to see if I find any reason for the hits not to be logged. My address is: mattr (at) wordfence.com

-Matt R

Hi Matt,

Sorry for the delayed response. Still running into non-blocked IPs that show no data / no recent hits. We’re not using a reverse proxy, no nginx and no caching plugins. It would be very helpful to be able to see the URLS an IP is accessing to confirm whether they are up to no good or not.

Thanks for your help!
Bill

Hi Bill,

The site’s access log would be the best way to see what URLs they are reaching, and may also help narrow down the reason for the unusual results. If you have a copy of it, you can email it to me at the email address above.

Since your original message, I haven’t seen any similar cases here or on any of our servers, so it would be good to see more detail on what might be happening.

-Matt R