Advertisement:

Author Topic: sucuri Same IP  (Read 342 times)

Offline sirfpsycho

  • Semi-Newbie
  • *
  • Posts: 74
sucuri Same IP
« on: November 04, 2019, 11:52:18 PM »
hi, I am using sucuri website firewall. But I could see that users have IP and and hostname of sucuri. How can I see original IP? I contacted sucuri team and they provided me this url:
 https://docs.sucuri.net/website-firewall/troubleshooting/same-ip-for-all-users/


Offline sirfpsycho

  • Semi-Newbie
  • *
  • Posts: 74
Re: sucuri Same IP
« Reply #1 on: November 06, 2019, 09:20:12 PM »
any option bro?

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 9,479
Re: sucuri Same IP
« Reply #2 on: November 06, 2019, 09:29:00 PM »
Just a guess, no way to test it, but IP is detected in QueryString.php.  You can try this from the link you posted -

Code: [Select]

if(isset($_SERVER['HTTP_X_SUCURI_CLIENTIP']))
{
    $_SERVER["REMOTE_ADDR"] = $_SERVER['HTTP_X_SUCURI_CLIENTIP'];
}

// Clean the request variables - add html entities to GET and slashes if magic_quotes_gpc is Off.
function cleanRequest()


Backup the file first.

Offline sirfpsycho

  • Semi-Newbie
  • *
  • Posts: 74
Re: sucuri Same IP
« Reply #3 on: November 07, 2019, 01:13:19 AM »
I added before php close at the end but it doesn't work.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 9,479
Re: sucuri Same IP
« Reply #4 on: November 07, 2019, 04:56:29 PM »
You can't just stick code anywhere.  Try adding it where I posted.

Offline sirfpsycho

  • Semi-Newbie
  • *
  • Posts: 74
Re: sucuri Same IP
« Reply #5 on: November 07, 2019, 09:10:37 PM »
Sorry, but I also pasted code before
// Clean the request variables - add html entities to GET and slashes

But still  same IP.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 9,479
Re: sucuri Same IP
« Reply #6 on: November 08, 2019, 11:16:50 AM »
You can echo $_SERVER['HTTP_X_SUCURI_CLIENTIP'] to see if it returns a value, otherwise can't be much help as I'm not running the firewall.  Only other thing I can think of is go to https://sucuri.net/ and see if they can help.