Title: User locked, cloudflare IPs
Last modified: July 16, 2020

---

# User locked, cloudflare IPs

 *  Resolved [dccorp](https://wordpress.org/support/users/dccorp/)
 * (@dccorp)
 * [5 years, 10 months ago](https://wordpress.org/support/topic/user-locked-cloudflare-ips/)
 * Hi,
 * I’m recveing a lot of probably fraudulent attempts to login to my sites (most
   of them as “admin” or “[login]”). [https://rizescu.com](https://rizescu.com) 
   is a test site (not a production site) on digitalocean.
 * The problem is all these attempts are blocked by wordfence, by blocking the “
   originating” IP. My sites are behind cloudflare (free), so unfortunately, all
   the IP’s blocked are in fact cloudflare’s IPs, not the original IPs.
 * I know I could whitelist all cloudflare’s IPs in wordfence, but I do not think
   this is a good security solution (the attackers will remain free to try forever
   via cloudflare).
 * Do you have any advice for this situation?
 * Thank you,
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fuser-locked-cloudflare-ips%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [dccorp](https://wordpress.org/support/users/dccorp/)
 * (@dccorp)
 * [5 years, 10 months ago](https://wordpress.org/support/topic/user-locked-cloudflare-ips/#post-13129904)
 * Ok, found the option
 * “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only 
   use if you’re using Cloudflare”
 * I will try it, thank you for your great plugin
 *  [WFSupport](https://wordpress.org/support/users/wfsupport/)
 * (@wfsupport)
 * [5 years, 10 months ago](https://wordpress.org/support/topic/user-locked-cloudflare-ips/#post-13133661)
 * No problem. That’s exactly what I was going to suggest. 🙂
 * Make sure you unblock the IPs that you blocked to be sure you aren’t blocking
   Cloudflare anymore.
 * Tim

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘User locked, cloudflare IPs’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [WFSupport](https://wordpress.org/support/users/wfsupport/)
 * Last activity: [5 years, 10 months ago](https://wordpress.org/support/topic/user-locked-cloudflare-ips/#post-13133661)
 * Status: resolved