Explain the Country and Regions listed in my server logs

We would like to know if the Cloudflare IPs locations capture on our web server logs is an indication of user’s location ie. Cloudflare IP in the US means the user is from the US, etc.

IP Country Region ISP
172.69.34.79 United States California CLOUDFLARENET
172.69.34.79 United States California CLOUDFLARENET
172.70.211.75 United States California CLOUDFLARENET
172.70.211.71 United States California CLOUDFLARENET
172.70.210.36 United States California CLOUDFLARENET
172.70.206.142 United States California CLOUDFLARENET
172.70.207.15 United States California CLOUDFLARENET

Thanks

https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs

Fully understand that … that 172.69.34.79 is an Cloudflare IP and why US as Country and California as Region are shown? Can you shed some light on that …I am only interested in the Country and Region shown… does that mean that the request came from the US?

Thanks

Am I right in saying that even though the IP address is an Cloudflare assigned one but the request to access the webserver originates from the US? I just want to know if that’s the case

Thanks

Anyone in this forum have any clue why the Country US and Region California listed?

Is this the right community to ask these questions? Support seems dead …looks like bot is providing all the feed back

Because you have not restored the original visitor IP address, and you are looking at the IP address of the Cloudflare Proxy, and not the end user.

Requests from the user go to a Cloudflare server. Cloudflare then makes a request to your Origin server. Your Origin server sees the Client IP address as the Cloudflare Server, not the user. Cloudflare pass the original visitor IP address in a header, as explained in the document linked above. You need to follow that link, where you will find detailed instructions on how to restore the Original Visitor IP address.

Classification: Private

Thank you michael, I think I now know that bit but what I am keen to know if possible is this

IP Country Region ISP
172.69.34.79 United States California CLOUDFLARENET
172.69.34.79 United States California CLOUDFLARENET
172.70.211.75 United States California CLOUDFLARENET

Why is the US and California shown? Did the original request come from there? if not then why are they there… there must be for a reason

Appreciate your assistance

Can you share the relevant configuration you put in place on your Origin server to restore the Original Visitor IP address?

Because that is where Cloudflare have their corporate HQ.

No.

Because you have not followed the procedure to restore the Original Visitor IP address. Cloudflare is a proxy service, you are looking at the IP address of the Proxy Server, not the end user.

2 Likes

Thanks Michael

So I guess Cloudflare also have HQ in this countries shown below

172.70.206.142 United States California CLOUDFLARENET
172.70.207.15 United States California CLOUDFLARENET
162.158.2.194 Australia Victoria CLOUDFLARENET
162.158.2.144 Australia Victoria CLOUDFLARENET
162.158.2.48 Australia Victoria CLOUDFLARENET
162.158.2.134 Australia Victoria CLOUDFLARENET
162.158.2.212 Australia Victoria CLOUDFLARENET
162.158.2.130 Australia Victoria CLOUDFLARENET
162.158.2.48 Australia Victoria CLOUDFLARENET
162.158.2.36 Australia Victoria CLOUDFLARENET
108.162.249.46 Australia New South Wales CLOUDFLARENET
108.162.250.115 Australia New South Wales CLOUDFLARENET
108.162.250.247 Australia New South Wales CLOUDFLARENET
108.162.249.28 Australia New South Wales CLOUDFLARENET
108.162.250.213 Australia New South Wales CLOUDFLARENET
108.162.250.177 Australia New South Wales CLOUDFLARENET
108.162.250.163 Australia New South Wales CLOUDFLARENET
108.162.250.165 Australia New South Wales CLOUDFLARENET
198.41.238.118 New Zealand Auckland CLOUDFLARENET
198.41.238.118 New Zealand Auckland CLOUDFLARENET
198.41.238.118 New Zealand Auckland CLOUDFLARENET
198.41.238.118 New Zealand Auckland CLOUDFLARENET

Thanks

The IP address and country are associated with IP address blocks Cloudflare owns… where they might show has 0 relation to the IP of your visitor. If you want to map where your visitors are from restore the visitor’s IP address in your logs or look at the Cloudflare specific headers that reference user location.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.