Trying to identify source of unusual activity

I am seeing unusual in error log files on my server. I see an ip address that seems to be the root of this activity, however when doing reverse lookup, it seems it is cloudflare ip. How can I find out what the true ip was on that date and time.

If you enable orange cloud :orange: then yes you will see Cloudflare IPs.

Unless you modify your web server config to read real IP address from HTTP request header (cf-connecting-ip), then the best bet would be firewall events in Cloudflare - but limited information.

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.