Local IP 127.0.0.1 is most blocked

  • 127.0.0.1 shows up as the most blocked IP on a site we’re using the free version of Wordfence on. In Diagnostics under IP Detection it looks like this:

    REMOTE_ADDR [our external IP] In use
    CF-Connecting-IP (not set)
    X-Real-IP (not set)
    X-Forwarded-For (not set)
    Trusted Proxies

    Is there something we need to fix here?

    Thanks.

    • This topic was modified 6 years, 7 months ago by toby1kenobi.
Viewing 4 replies - 1 through 4 (of 4 total)

  • Hi @toby1kenobi

    It seems like the plugin is detecting IPs correctly on your website, as the server loopback IP address is being blocked instead of the real IP, I assume there is something misconfigured in your server setup.

    Can you filter the traffic by “Blocked” in (Wordfence > Tools > Live Traffic) and share a screenshot showing some of the blocked entries with this IP address?

    Thanks.

    Thread Starter toby1kenobi

    (@toby1kenobi)

    Apologies, thought I’d replied to this already – it doesn’t seem to be happening right now, I will try to keep an eye on it and see if it recurs.

    What is the timescale for the table of most blocked IPs that appears in WordPress’s dashboard, maybe those hits I’m seeing are really old?

    Thanks.

    Thread Starter toby1kenobi

    (@toby1kenobi)

    I looked on another site we manage, hopefully you can see this https://ibb.co/gmw6Fo

    Hi @toby1kenobi

    Just saw this now, sorry for that. I wonder if you still get these entries in the Live Traffic?
    Can you confirm that you aren’t using Cloudflare?

    Also, try to check the server row access log, looking for the same entries matching with this timestamp in Live Traffic feed, if you found your localhost IP reported there as well, then you will have to report this issue to your hosting provider as it’s most likely something misconfigured in the server configuration.

    Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Local IP 127.0.0.1 is most blocked’ is closed to new replies.