rammichael

<p>From the Cloudflare Support website:</p>
<p>Q: Why do my server logs show Cloudflare’s IPs using Cloudflare?</p>
<p>A: When you sign on to Cloudflare the way your logs are displayed will change because Cloudflare<br />
   acts as a proxy. This means that your visitors are routed through the Cloudflare network. This<br />
   allows Cloudflare to stop attacks before they reach your network. It also allows Cloudflare to<br />
   speed up page load time by more efficiently routing packets and, more importantly, caching<br />
   static resources (images, javascript, css, etc.) on a very fast connection. However, as a<br />
   result, the connecting IP will always come from the Cloudflare network.</p>
<p>As a result, commenters’ IP will also be masked by Cloudflare. Luckily, Cloudflare sends the real<br />
user’s IP in a separate header. This plugin saves it, as well as the user’s geo-location (also<br />
provided by Cloudflare), and displays this information in the admin panel.</p>
<p>Note that when the blog is served directly to the internet (not through Cloudflare), anyone can<br />
spoof any IP address and geo-location by specifying any value in the request headers.</p>


Real IP and Geo for Cloudflare

The plugin saves and displays visitors' real IP and location, instead of Cloudflare's.

guguan123

<p>This WordPress plugin is designed to correct the inaccurate display of commenter IP addresses on websites utilizing Cloudflare CDN. By processing proxy IPs from Cloudflare, this plugin ensures that the real commenter IP information is retrieved and recorded. This is crucial for comment moderation, spam identification, and website security analysis.</p>
<p>Please note: This plugin is provided by an independent developer and is not an official Cloudflare product.</p>
<h3>Usage</h3>
<ol>
<li>Ensure your WordPress website is correctly configured and proxied through Cloudflare CDN.</li>
<li>Once activated, the plugin will automatically correct IP addresses in the following functionalities to display the real visitor IP:
<ul>
<li><strong>User Comments:</strong> The IP address recorded upon comment submission.</li>
<li><strong>Password Reset Emails:</strong> The IP address included in password reset emails sent to users.</li>
</ul>
</li>
</ol>
<p>This plugin requires no additional configuration; it works automatically upon activation.</p>
<h3>External Services</h3>
<p>This plugin connects to the Cloudflare API to retrieve the latest list of Cloudflare CDN IP addresses. This is necessary to ensure the plugin can accurately handle IP-related functionalities, such as fixing comment IP detection when Cloudflare’s CDN is in use.</p>
<h3>What the service is and what it is used for</h3>
<p>The plugin uses the Cloudflare API (specifically the <code>https://api.cloudflare.com/client/v4/ips</code> endpoint) to fetch the current list of Cloudflare CDN IP addresses.</p>
<h3>What data is sent and when</h3>
<p>The plugin <strong>does not send any user-specific data</strong> to the Cloudflare API. It only makes a simple GET request to the API endpoint to retrieve the IP list. This request occurs when the plugin needs to refresh the IP list.</p>
<h3>Service provider</h3>
<p>The service for retrieving Cloudflare IP lists is provided by Cloudflare, Inc..</p>
<h3>Links to terms of service and privacy policy</h3>
<ul>
<li>Terms of Service: https://www.cloudflare.com/terms/</li>
<li>Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<p>The retrieval of this information (Cloudflare IP list) ensures the plugin functions correctly with Cloudflare’s CDN services. No personal or sensitive user data is transmitted during this process.</p>
<h3>Libraries Used</h3>
<ul>
<li><strong><a href="https://github.com/mlocati/ip-lib" rel="nofollow ugc">IPLib</a></strong>: Used for parsing and matching IP addresses.</li>
</ul>


Corrected commenter IP for Cloudflare CDN

A plugin to correct commenter IP addresses for WordPress websites using Cloudflare CDN.

Real IP and Geo for Cloudflare vs Corrected commenter IP for Cloudflare CDN