Many popular WordPress security plugins vulnerable to IP spoofing. https://blog.nintechnet.com/many-popular-wordpress-security-plugins-vulnerable-to-ip-spoofing/