Unable to accurately detect IPs

Hi @emgb_520,

Thank you for reaching out.

Please check the following site and take note of your IP – (note that this detection can sometimes not be 100% accurate on cellular phone network connections): https://www.whatsmyip.org

Then, head over to your site and go to Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs and reference the area under that section that says Detected IPs and Your IP with this setting. Start from the top and check to see if any of the settings show that both of those show the same IP as the site above does. You will need to use the setting that displays the IP displayed on https://www.whatsmyip.org  going forward, so click the SAVE button once you’re done.

If you’re using Cloudflare, you will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare”.

There are some further explanations of IP detection and which option to select if your site is using Cloudflare here: https://www.wordfence.com/help/dashboard/options/

Thanks,

Janet.

Hello, Janet.

Thank you for your quick response.

I have followed your instructions. “Detected IP(s)” is the correct IP that displays at whatismyip.org, but the “Your IP with this setting” is not the same. I am unsure how to proceed.

Thanks!

Hi @emgb_520,

Thank you for getting back to us.

Can you please send a diagnostic report to wftest @ wordfence.com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks,

Janet

Hello, Janet.

I have sent the diagnostic report.

Thank you!

?Hi @emgb_520,

I can’t seem to find it.
Please resend to?[email protected]? You can find the link to do so at the top of the?Wordfence > Tools > Diagnostics?page. Then click on “Send Report by Email”. Please add your forum username where indicated and?respond here after you have sent it.
NOTE:?It should look as follows – Screenshot of?Tools > Diagnostic > Send by Email

Thanks,

Janet

I have re-sent and rec’d this message upon sending:

Email Diagnostic Report – Diagnostic report has been sent successfully.

Hi @emgb_520,

It looks like emails from your site aren’t coming through.

Please try the below:

Navigate to Wordfence > Tools > Diagnostic page and then click the “Export” button. Send the txt file to [email protected]. Add your forum username in the subject and respond here once done.

Thanks,

Janet

I have exported the report and sent as an attachment via email.

Thank you!

Hi @emgb_520,

Thank you for sending the diagnostic report.
I took a look at it, and it looks like you might be using Sucuri as a proxy or service. Please try the troubleshooting steps below:

In the Wordfence > All Options > General Wordfence Options section, you will see the subsection How does Wordfence get IPs. Select the option Use the “X-Forwarded-For HTTP header”. Only use if you have a front-end proxy, or spoofing may result

Remember to press the SAVE CHANGES button.

Check your IP address by going to the link below and make a note of it:

https://whatismyipaddress.com

Go back to the How does Wordfence get IPs subsection, and if your own IP address from the IP check above does not appear in the line Your IP with this setting, then you may need to add these Sucuri trusted proxy IP addresses:

Click on the text link +Edit trusted proxies. You will need to add the following IP address ranges in the text box that appears, each on a new line:

192.88.134.0/23

185.93.228.0/22

66.248.200.0/22

208.109.0.0/22

2a02:fe80::/29

The above list of IP address ranges may change, so you can check the list here periodically:

https://docs.sucuri.net/website-firewall/troubleshooting/same-ip-for-all-users

Please do not add any of the code listed on that page to your site. Remember to press the SAVE CHANGES button.

Now, once again, check that your IP address appears correctly in the line Your IP with this setting.

Let me know how it goes.

Thanks,
Janet

I performed the steps above, but the alert is still generating. I have reached out to Sucuri support, as well, to see if this is anything they can help with.

Do you have any other suggestions? Thank you!

Hi @emgb_520,

Please reach out to Sucuri and ask them to pass the actual IP address of site visitors to your website.

They should be able to solve this for you. Wordfence is only seeing the IP address that they are sending.

Thanks,
Janet

• This reply was modified 1 year, 6 months ago by wfjanet.