+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Webmasters (https://hackforums.net/forumdisplay.php?fid=141)
+---- Forum: Website Construction (https://hackforums.net/forumdisplay.php?fid=50)
+---- Thread: Google Listed the IP address of my webserver even though its hidden behind CloudFlare (/showthread.php?tid=6098073)
Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Snow - Jul 27, 2020
So I just happened to be googling my website and found that google some how listed the real IP address of my server. Is there a way to reverse and stop this from happening again?
All my DNS records are proxied by CloudFlare.
If it helps I am running a Mybb Forum.
Honestly the only thing I can think of is maybe it was this plugin I had installed?
https://community.mybb.com/thread-202483.html
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Egregious - Jul 27, 2020
(Jul 27, 2020 07:36 AM)Snow Wrote: So I just happened to be googling my website and found that google some how listed the real IP address of my server. Is there a way to reverse and stop this from happening again?
All my DNS records are proxied by CloudFlare.
If it helps I am running a Mybb Forum.
Honestly the only thing I can think of is maybe it was this plugin I had installed?
https://community.mybb.com/thread-202483.html
Not knowing your exact situation, it's possible that Google crawled your direct IP address if you didn't already have that blocked. On your backend server, whitelist Cloudflare IPs (https://www.cloudflare.com/ips/) and drop all other web traffic.
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Snow - Jul 27, 2020
(Jul 27, 2020 07:54 AM)Egregious Wrote: Not knowing your exact situation, it's possible that Google crawled your direct IP address if you didn't already have that blocked. On your backend server, whitelist Cloudflare IPs (https://www.cloudflare.com/ips/) and drop all other web traffic.
Good idea. I can't believe this happened. I was wondering how my server kept getting hit by DDoS attacks.
Thank you again for your feedback I greatly appreciate this.
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Squito - Jul 28, 2020
If you run it on a VPS you should use Egregious' advice at iptables level. If you're running Apache, you should use mod_evasive (dunno what its nginx/openlitespeed variant called).
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Snow - Jul 29, 2020
If either of you in interested in helping me out configure this firewall I would be willing to pay. Just worried I might block myself out of my centos 7 server and I really don't want to spend hours setting up my website again.
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - Squito - Jul 30, 2020
https://gist.github.com/Manouchehri/cdd4e56db6596e7c3c5a
RE: Google Listed the IP address of my webserver even though its hidden behind CloudFlare - __Digital__ - Jul 30, 2020
What types of attacks are you getting ??? A lot of them can be stopped with iptables and dos deflate and server shield. If you need help feel free to drop me a pm and i will help you out.