This tutorial post covers this message:
An A, AAAA, CNAME, or MX record is pointed to your origin server exposing your origin IP address
Normally your IP address is hidden by Cloudflare and any lookups would see an Cloudflare IP address rather than that of your origin server.
This message appears when a DNS record is exposing the origin IP address.
This is most likely to be caused by a record being set to rather than .
It is also often caused by mail records, as Cloudflare cannot proxy mail services.
If you are on shared hosting and have one IP address for both your website and your mail, you don’t have a lot of choice, your host will have their own ways of mitigating DOS attacks and there is nothing you can do about it.
If there is a record set to that could be set to ( please see Enabling the 'Orange Cloud' :orange: ) then this may remove the warning.
If you can use a different IP address it hostname for your mail server, this would also help as the IP of your web server would not be visible.
This is a Community Tutorial, most are wiki posts, so can be contributed to by Regulars and MVPs here, you can view all the community tutorials here. If there is a tutorial you would like to see, you can request one here.
Other great resources on this community include the Community Tips . These address best practices when configuring Cloudflare, how to fix issues you may see, and tools to troubleshoot. Also you can view Expert Tips, great posts on the community that can help users with a similar issue.
We encourage users to check out these great resources and the Cloudflare Support Centre before posting