Determines the true client IP by verifying Forwarded and similar headers, traversing only trusted proxy hops.

alessiobravi

Client IP Detector Plugin

A Simple widget to display client IP Address and print if the client is connecting via IPv6 or IPv4.

Sly Gryphon

Gryphon Verified Client IP determines the client IP by walking the forwarding chain, only trusting addresses that match your configured proxy networks (by CIDR range). It stops at the first untrusted hop, which is the true client IP. The resolved address replaces <code>REMOTE_ADDR</code> early in the WordPress lifecycle, allowing other plugins to use it.
The component is secure by default and only trusted proxies are traversed; spoofed headers are ignored. Both IPv4 and IPv6 are fully supported, including protocol translation.
Multiple header formats are supported including standard RFC 7239 <code>Forwarded</code>, common <code>X-Forwarded-For</code>, Cloudflare <code>CF-Connecting-IP</code>, or any custom header.
The component includes a diagnostics panel that can be enabled to record incoming requests with full header dumps and algorithm step traces for debugging.
For more detail, see the GitHub project site <a href="https://github.com/sgryphon/essential-wordpress-verified-client-ip" rel="nofollow ugc">Gryphon WordPress Verified Client IP</a>.
<h4>Compatibility Note</h4>
If your server uses Apache <code>mod_remoteip</code> or nginx <code>set_real_ip_from</code>, those modules will pre-resolve <code>REMOTE_ADDR</code> from forwarding headers before PHP runs. Disable the web server module and let this plugin handle IP resolution instead, or let it pre-resolve and use this plugin for any additional proxies not covered by the engine.

Alternatives to Gryphon Verified Client IP

Top alternatives