[Zealotry]

How to Manually Resolve Cloudflare

About this TuT

I recently saw a tutorial on how to resolve Cloudflare IP's, but it was dependant on a site. While I host my own Cloudflare resolver, I prefer to refrain from relying on anybody besides myself, including hosting companies.

How to Manually Resolve Cloudflare IP's

Resolving Cloudflare IP's is stupid easy.
First, open up CMD.
Next, ping the following:

• ftp.sitenamehere.extension
  
• direct.sitenamehere.extension
  
• direct-connect.sitenamehere.extension
  
• cpanel.sitenamehere.extension
  
• mail.sitenamehere.extension
  

Which One is the Real IP?

Typically, ftp or direct will give you the real IP. To test this, navigate your web browser to the IP you get. If you get a cloudflare notification, try another. However, most smaller sites usually forget to fix this.

Enjoy!
Zealotry

[Dismas]

This is just the tip of the iceberg, as there are plenty of other ways to obtain a site's real IP. One way is to check registration email headers, as many sites use PHP mail. Few site-owners know, but PHP mail isn't sent through Cloudflare. In order to prevent this, our site uses SMTP to deliver emails, and they don't come from our site. While fixing things like these might stop a few script-kiddies in their tracks, Cloudflare shouldn't be used as a primary means of protection.

[Ultimatum]

This is just the tip of the iceberg, as there are plenty of other ways to obtain a site's real IP. One way is to check registration email headers, as many sites use PHP mail. Few site-owners know, but PHP mail isn't sent through Cloudflare. In order to prevent this, our site uses SMTP to deliver emails, and they don't come from our site. While fixing things like these might stop a few script-kiddies in their tracks, Cloudflare shouldn't be used as a primary means of protection.

Anar here is totally correct. There are very simple ways to prevent IP tracing on a site. The noobs use Cloudflare, but we use it only because it is much easier that the layer of protection is accessible 24/7 and easy to use. I'm sure Anar has applied extra security measures in place such as the SMTP email delivery through a completely external server to the server that the site is hosted on.

Great touch on though.