I am seeing unusual in error log files on my server. I see an ip address that seems to be the root of this activity, however when doing reverse lookup, it seems it is cloudflare ip. How can I find out what the true ip was on that date and time.
If you enable orange cloud 
then yes you will see Cloudflare IPs.
Unless you modify your web server config to read real IP address from HTTP request header (cf-connecting-ip), then the best bet would be firewall events in Cloudflare - but limited information.
This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.