Help me get real hacker IP

I have apache acess_log contain IP address of hacker request that access to my website admin, but it is Cloudflare’s IP address.
Do you have any idea of finding the hacker real IP? log date is 2022-05-30.

https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs

3 Likes

The CF-Connecting-IP header will contain the client IP address. You can read more about it here: https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs

3 Likes

You should restore the original IP using the documentation here:

https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs

Or you could just add the CF-Connecting-IP header to your logs.

3 Likes

Thank for your help. But these are future solution. For now, I need to find out real IP of visitors access my website yesterday.

Unfortunately, too late. Maybe if the attacker hit any of your firewall rules, you can find them, but… :man_shrugging:

2 Likes

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.