Unmasking the True Origin IP Address

Website, Application, Performance Security
1

What is the name of the domain?

mywebsite.com

What is the issue you’re encountering

Hello Cloudflare Support Team, I need your help in providing security to my website, let’s say my domain is www.mywebsite.com, which is being proxied through Cloudflare. My website origin server is hosted over on Namecheap with an IP address of 162.0.209.1 (As an example). I’m worried about an attacker who might find out my Namecheap origin IP and start doing direct HTTP GET requests to it, possibly bypassing Cloudflare security using the host header “mywebsite.com”. Please, let me know the best practices and features that Cloudflare allows for the protection of my origin server. Thank you for your time and support. I will be looking forward to your guidance on how effectively the origin server can be secured. Warm regards, Sahar.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

2

For…

…see…

A full guide here…

2 Likes
3

Thank you!
I have another question; Is there any way that an attacker be able to perform HTTP request using Cloudflare IP?

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.