Drews
By:
Drews

Wordfence: Why do all users visiting site have the droplet ip.

March 15, 2016 1k views
Networking WordPress

Hi,
I have noticed that in Wordfence every visit to the site is logged with the server ip address and not the real ip address of the visitor.

Any help on why that might be happening. It's done it since day one.

Thanks
Drew

1 Answer

Hey Drew - First thing I would do is check this suggestion from the plugin author:

Can you try playing with the setting on the options page that says "How Wordfence gets IPs"? Select the option that best fits your hosting environment. If you are unsure you can select one after the other, saving in between, and check live traffic for real ip addresses to see which one fixes it.
https://wordpress.org/support/topic/all-hits-from-same-ip-after-hosting-upgrade

If that doesn't work, can you describe how your Wordpress is setup? Is it on a server with Apache or nginx? Are you running Wordpress behind a reverse proxy (where nginx or apache forwards all traffic through to a separate port) - this would cause you to see your own droplet's IP, but it can be fixed. Do you have a service like cloudflare setup in front of wordpress - This can also be fixed

  • Thanks for the reply Andy.

    I've tested the first suggestion with some success.

    I think that Apache/Nginx reverse proxy is the cuplrit though.

    I'm checking that out now.
    Thanks for the pointer :)

    Cheers
    Drew

Have another answer? Share your knowledge.