Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Webmasters Website Construction › Google Listed the IP address of my webserver even though its hidden behind CloudFlare

New Reply 

Google Listed the IP address of my webserver even though its hidden behind CloudFlare
Snow
Snow Offline
Snow Productions
***
HF Ub3r
Posts:
2,570
Threads:
304
Credibility:
400
Popularity:
574
βytes:
β 0
Game XP:
3
Jul 27, 2020 07:36 AM (This post was last modified: Jul 27, 2020 07:46 AM by Snow.)
So I just happened to be googling my website and found that google some how listed the real IP address of my server. Is there a way to reverse and stop this from happening again?

All my DNS records are proxied by CloudFlare.

If it helps I am running a Mybb Forum.

Honestly the only thing I can think of is maybe it was this plugin I had installed?
https://community.mybb.com/thread-202483.html
[Image: NmoOIdi.gif]
Egregious
Egregious Offline
Fiat justitia ruat caelum.
*******
Quantum
Posts:
2,058
Threads:
16
Credibility:
15000
Popularity:
1,274
βytes:
β 95
Game XP:
0
Jul 27, 2020 07:54 AM
(Jul 27, 2020 07:36 AM)Snow Wrote:  So I just happened to be googling my website and found that google some how listed the real IP address of my server. Is there a way to reverse and stop this from happening again?

All my DNS records are proxied by CloudFlare.

If it helps I am running a Mybb Forum.

Honestly the only thing I can think of is maybe it was this plugin I had installed?
https://community.mybb.com/thread-202483.html

Not knowing your exact situation, it's possible that Google crawled your direct IP address if you didn't already have that blocked. On your backend server, whitelist Cloudflare IPs (https://www.cloudflare.com/ips/) and drop all other web traffic.

[Image: QofQCoR.gif]

Snow
Snow Offline
Snow Productions
***
HF Ub3r
Posts:
2,570
Threads:
304
Credibility:
400
Popularity:
574
βytes:
β 0
Game XP:
3
Jul 27, 2020 07:57 AM
(Jul 27, 2020 07:54 AM)Egregious Wrote:  Not knowing your exact situation, it's possible that Google crawled your direct IP address if you didn't already have that blocked. On your backend server, whitelist Cloudflare IPs (https://www.cloudflare.com/ips/) and drop all other web traffic.

Good idea. I can't believe this happened. I was wondering how my server kept getting hit by DDoS attacks.

Thank you again for your feedback I greatly appreciate this.
[Image: NmoOIdi.gif]
Squito
Squito Offline
root@hfhosting:~#
***
HF Ub3r
Posts:
2,553
Threads:
10
Credibility:
100
Popularity:
217
βytes:
β 0
Game XP:
0
Jul 28, 2020 12:39 AM
If you run it on a VPS you should use Egregious' advice at iptables level. If you're running Apache, you should use mod_evasive (dunno what its nginx/openlitespeed variant called).
You see, Doctor, God didn't kill that little girl. Fate didn't butcher her and destiny didn't feed her to those dogs.
If God saw what any of us did that night he didn't seem to mind. From then on I knew... God doesn't make the world this way.
We do.
Snow
Snow Offline
Snow Productions
***
HF Ub3r
Posts:
2,570
Threads:
304
Credibility:
400
Popularity:
574
βytes:
β 0
Game XP:
3
Jul 29, 2020 05:12 PM
If either of you in interested in helping me out configure this firewall I would be willing to pay. Just worried I might block myself out of my centos 7 server and I really don't want to spend hours setting up my website again.
[Image: NmoOIdi.gif]
Squito
Squito Offline
root@hfhosting:~#
***
HF Ub3r
Posts:
2,553
Threads:
10
Credibility:
100
Popularity:
217
βytes:
β 0
Game XP:
0
Jul 30, 2020 02:15 AM
https://gist.github.com/Manouchehri/cdd4...596e7c3c5a
You see, Doctor, God didn't kill that little girl. Fate didn't butcher her and destiny didn't feed her to those dogs.
If God saw what any of us did that night he didn't seem to mind. From then on I knew... God doesn't make the world this way.
We do.
__Digital__
__Digital__ Offline
Senior Server Admin
**********
The Brotherhood
Posts:
3,978
Threads:
47
Credibility:
13200
Popularity:
1,197
βytes:
β 340.2
Game XP:
0
Jul 30, 2020 08:21 AM
What types of attacks are you getting ??? A lot of them can be stopped with iptables and dos deflate and server shield. If you need help feel free to drop me a pm and i will help you out.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by DrDrillMay 27, 2020 01:42 PM 3 144 May 27, 2020 01:42 PM
Last Post: DrDrill
by John McClaneJul 21, 2017 12:25 PM 4 149 Jul 21, 2017 12:25 PM
Last Post: Charger
by Killer992Oct 26, 2016 10:33 AM 1 144 Oct 26, 2016 10:33 AM
Last Post: kznamst