Wordfence alert not showing correct info

Hi @jgold723, thanks for contacting us!

It sounds like the site is detecting visitor IPs incorrectly. Look at Wordfence > Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays your current IP address as seen on https://whatsmyip.com/. That will be the setting you need to use going forward, so click the SAVE button once you’re done.

There are some further explanations of IP detection and which option to select if your site is using Cloudflare here: https://www.wordfence.com/help/dashboard/options/

Thanks,

Peter.

OK, I did that, but the only two options that generate the correct IP address (X-Forwarded and X-Real) throw up warnings about the risk of spoofing. I’ve selected X-real for now, because Wordfence keeps locking me out because of the brute force attacks being perpetrated from elsewhere.

Is there a different solution to this?

Hi @jgold723,

Great news that you’re able to find the correct IP in these settings. The X-Forwarded-For and X-Real are usually only required to be used when your host or server environment is behind a front-end proxy such as Cloudflare. I would expect customers where the IP address is detected correctly with other headers to not select these options to avoid spoofing. It sounds like you will be using it under the correct circumstances as the IP address is not detected correctly with the other options.

Thanks again,

Peter.