If you're still having this issue, you need to make sure you're accessing your site via the "canonical" URL (www and https variations included). It's also important that your session is maintained, so if you have any reverse proxy involved, you need to make sure that XF is seeing the "real" client IP.