Why does a whitelisted IP still appear in statistics?

Adding a whitelist in cPFence v4+ changes policy; it does not erase earlier incidents.

Read current policy separately from retained counts. The address is hidden. Select the image for full size; use browser Back to return.

1. Open IPDB summary and find the address.
2. Open Details and compare the incident time with the whitelist change.
3. Check Current policy and expiry, then Refresh.
4. Test the intended connection. Another policy can still affect access.

History and policy are different

An old block count is not proof of a current block. Apply date filters to review recent incidents instead of clearing history.

Keep diagnostic records

Do not truncate system logs or delete cPFence history to hide old counts. Logs can contain evidence needed for incident investigation and other services.

If a fresh incident still affects the connection, follow investigate an IP block.