How to block IP when it's masked by Cloudflare

Application Security SSL / TLS
1

Someone’s deleting posts on my site via web services
Ex
162.xxx.255.xxx - - [09/Nov/2019:18:29:18 +0000] "GET deletePostimage/195/92

how do I even find out who this is if their IP is protected by Cloudflare? (I added real IP to nginx just minutes ago)

2

RealIP should do it, as all requests coming through Cloudflare include visitor IP addresses in the request header. And once you get that, you can use Firewall Rules to block those requests.

3

Thanks

So I just have to wait 'til he strikes again. Cloudflare will not give me his real IP unless I have enterprise. Am I correct?

4

Correct. Your current logs don’t have the visitor IP address, and Cloudflare has no logs unless you’re on Enterprise.

1 Like
5

This topic was automatically closed after 30 days. New replies are no longer allowed.