Can't block a Website Visitor with an Cloudflare IP Address

Hi, there is a visitor that keeps coming to my website and filling out bogus information on our Contact Us page. I can normally block the IP addresses of any visitor but I cannot with this particular visitor.

His IP address is: 162.158.146.136

I have blocked this IP address, and also the IP range of 162.158.146.0/16, and also 162.158.146.0/24 but the prick still can access my website.

Why can’t I block this IP address from within Firewall/IP Access Rules within my CF account?

1 Like

Yes, that is a Cloudflare IP address. A CF IP showing up in your logs likely means you haven’t restored visitor IP addresses:

https://support.cloudflare.com/hc/en-us/sections/200805497-Restoring-Visitor-IPs

You need to pull the visitor’s IP from the header cf-connecting-ip to get the real IP, and then you could block it in Cloudflare.

3 Likes