Wordfence Blocking Host IP Address as Fake Google Crawler

  • Resolved Acceler8Media

    (@acceler8media)


    9 years, 4 months ago

    Hello,

    I have a number of websites with Wordfence installed and it works great. However, I have just started getting the following message from several sites on a regular basis. As it is the host ip it is also locking meout from accessing the site unless I clear the block from myphpadmin.

    How can I prevent this? If it is a bot which is using/spoofing the ip address then will I be removing the defence if I whitelist the host ip address?

    A user with IP address ##.###.###.## has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘wpengine’ to try to sign in.
    User IP: ##.###.###.##
    User hostname: cloud.##########.co.uk
    User location: United Kingdom

    https://www.ads-software.com/plugins/wordfence/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WFMattR

    (@wfmattr)

    It sounds like your site is using a “reverse proxy”, so Wordfence cannot see the visitors’ actual IP addresses. You will need to set the option “How does Wordfence get IPs” on the Wordfence Options page. Depending on what software your server is using, you probably need to choose the X-Real-IP or X-Forwarded-For option. More details on the choices are here:
    How does Wordfence get IPs

    After setting the option, you can verify it is working by looking at the Live Traffic page, and visiting the site in a separate browser where you are not logged in, and verify that your own IP appears in your own visits. (If Live Traffic is disabled, try logging in using the second browser, since logins and logouts are still recorded.)

    Let me know if this helps, or if you still have any trouble.

    -Matt R

    Thread Starter Acceler8Media

    (@acceler8media)

    Hi Matt,

    Thanks. I’ve been tearing my hair out with this one. The X-Real option didn’t work, but the X-Forwarded seems to have done the trick.

    Cheers

    Nathan

    Plugin Author WFMattR

    (@wfmattr)

    Great, thanks for confirming!

    -Matt R

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Wordfence Blocking Host IP Address as Fake Google Crawler’ is closed to new replies.