| SYSTEM INFORMATION | |
|---|---|
| OS type and version | Rocky Linux 9.2 |
| Webmin version | 2.101 |
| Virtualmin version | 7.7 Pro |
| Related packages | Apache version 2.4.53 |
I got a weird issue what all IPv6 web connections are being logged as the Servers IPv4 address.
I’ve google the issue and can’t see any solutions. Anyone else see this or is it just me.
eg, I used my mobile phone and turned off the LAN wifi so I’ve get a IPv6 address and visitored a site on the server and I get this logged.
149.x.x.x - - [12/Sep/2023:09:43:29 +1000] “GET / HTTP/1.1” 200 33031 “-” “Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36”
The IP is of the servers.
Also I’m not getting this in the mail logs, it sees my IPv6 address.
I first noticed this when wordfence complained like this.
This email was sent from your website “” by the Wordfence plugin at Tuesday 12th of September 2023 at 06:15:22 AM
The Wordfence administrative URL for this site is: http://www.domain.com/wp-admin/admin.php?page=Wordfence
A user with IP address 149.x.x.x has been locked out from signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 20. The last username they tried to sign in with was: ‘imprespul123’.
The duration of the lockout is 4 hours.
User IP: 149.x.x.x
User hostname: mail.domain.net.au
User location: Sydney, New South Wales, Australia
(ip is the server)
Any ideas???
Steve
