Blocked country gaining access via cloudflare

  • Resolved john53

    (@john53)


    6 years, 4 months ago

    Hi
    I have noticed on google analytics that someone from Azerbaijan is visiting my site and trying to gain access. This doesn’t show on the log of the plugin.

    I have the cloudflare api installed.

    Is there any way I can block countries that are hiding their origin by using cloudflare to connect to my site?

    Thank you

    Best regards
    John

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    6 years, 4 months ago

    Hi @john53,

    You may use cloudflare as a reverse proxy service. You should know “How does cloudflare handle the visitor’s IP address?“.

    And this plugin provides a dedicated class library for cloudflare. Please refer to “CloudFlare & CloudFront API class library” and install the class library into your /wp-content/ip-geo-api/zcloudflare/.

    Thanks you for asking.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    6 years, 4 months ago

    Hi again John,

    Sorry but I overlooked your previous post.

    Have you already installed cloudflare API class library for this plugin?

    If so, please check the name of the country to put Azerbaijan’s IP address (which you may be able to get from Google Analytics) into the text field on “Search” tab using some different “Geolocation service”s.

    Thanks.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    6 years, 4 months ago

    Sometimes, this could happen:

    Thread Starter john53

    (@john53)

    6 years, 4 months ago

    Hi Tokkonopapa
    Thank you very much for getting back to me. Yes I have installed cloudflare api and it is working fine apart from with this one visitor.

    I have gone to the settings tab and scanned county code and all the listings shown there are GB.

    I cant find the visitors ip address from google analytics but I have googled the ip address for baku and there are a lot of ip address ranges.

    Where should I add all these ipp ranges in order to block the visitor.

    If I go to maxmind instead of cloudflare should I leave the cloudflare api installed?

    Many thanks for all your help and for creating such a brilliant plugin.

    Best regards
    John

    Thread Starter john53

    (@john53)

    6 years, 4 months ago

    Hi again
    I use the whitelisting method but I have added quite a lot of countries besides GB because I was worried that search engines like google may be blocked and we have some twitter followers from America and other countries who may want to see our website.

    This is our list of whitelisted countries:-
    GB,US,FR,AU,CA,NZ,BE,DK,FI,IE,AT,IT,LU,NL,NO,PT,SE,ES,CH

    Thanks again
    Best regards
    John

    Thread Starter john53

    (@john53)

    6 years, 4 months ago

    Hi Tokkonopapa
    I have found a website that generates a deny list for copied a htaccess deny list for Azerbaijan and copied it to my htaccess file.

    My site still works and fetch as google still works fine so fingers crossed!

    I will leave cloudflare api running unless you advise otherwise.

    Thank you one again.

    Best regards
    John

    Plugin Author tokkonopapa

    (@tokkonopapa)

    6 years, 4 months ago

    Hi John,

    I will leave cloudflare api running unless you advise otherwise.

    This is another solution if you want to try using Maxmind or IP2Location:

    1. Please uncheck “CloudFlare” in “Geolocation API settings” section.

    2. Then put HTTP_CF_CONNECTING_IP into “$_SERVER keys to retrieve extra IP addresses” in “Validation rule settings” section.

    I’d appreciate you if you let me know which API is better.

    My site still works and fetch as google still works fine so fingers crossed!

    I’m happy to hear that. OK, once I close this topic, but please feel free to post something you need.

    Thanks!

    Thread Starter john53

    (@john53)

    6 years, 4 months ago

    Thank you very much.

    I have deselected cloudflare API and added HTTP_CF_CONNECTING_IP to the $_SERVER keys to retrieve extra IP addresses” in “Validation rule settings” section.

    How do I get the information to put in the IPinfoDB box shown in your screenshot?

    Best regards
    John

    Plugin Author tokkonopapa

    (@tokkonopapa)

    6 years, 4 months ago

    Hi John,

    You can register from “Account” or “Create Free Account“, then you get the API key.

    They say:

    Information is provided by IP2Location Commercial version.

    Please try!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Blocked country gaining access via cloudflare’ is closed to new replies.