I'm pretty sure there's a way to prevent access to a website through the server IP address and to force the user to enter the domain name instead.
http://126.96.36.199 should trigger a 403 and only access through
http://www.example.com should be authorized.
I think there was a modsecurity rule for that but I can't find it anywhere. Does someone know?