Friday, November 9, 2012

HOW TO FIND REAL I.P. PROTECTED BY CLOUD FLARE?

All these methods are based on bad admin configurations, but still are quite common

If you want to find real I.P. address of website, which is hidden by CLOUDFLARE. It has came to my attention that many booters, hosts, malicious websites, and more use CloudFlare for DDoS Protection & Anti-Abuse Report Protection. With CloudFlare protection, it is difficult to get the hosts IP; therefore, it is difficult to send an abuse report or launch a (D)DoS attack. This simple guide will help you obtain any website protected by CloudFlare's real IP, which can be used for whatever you desire!

METHOD 1:-

If you simply ping the domain , it will give i.p. which is not website`s real i.p. address. you should try following option to get real I.P. address of domain.

ping direct-connect.domain.com

             OR

ping direct.domain.com

             OR

ping ftp.domain.com

             OR

ping cpanel.domain.com

             OR

ping mail.domain.com

METHOD 2 :-

For a Long Aged Domain you can use netcraft toolbar to check real ip

For Example

Code:

http://toolbar.netcraft.com/site_report?url=DOMAIN.COM

Clearly We can see change in IP to a cloudflare one.

METHOD 3 :-

You can try bruteforcing DNS , some subdomain will have real IP of website.

For this purpose you need NMAP tools.

Open your terminal with root privellege & type following code

# nmap -sV -sS -F <target>

it will scan host & give results , it`s not give real i.p. of website.(but from this you can know weather website is protected by CLOUDFLARE or not)

Now type following code in terminal

# nmap --script dns-brute -sn <target>

it will give you real I.P. of website.


I made simple bash script which do all things for you.For more details click here.

Cloudflare-resolver

IF all of above methods does not work ;then there is no admin misconfiguration. So you cannot find real I.P.

63 comments:

Unknown said...

nothing work for me in this site "desirekal.com"
please help me send me e-mail...

nirav desai said...

Real i.p=91.205.40.12

Unknown said...
This comment has been removed by the author.
nirav desai said...

ajnabi.net is offline now, so i cannot find its Real i.p. :(@mehroze malik

Unknown said...

& pklover.net??

nirav desai said...

All these methods are based on bad admin configurations, if admin configuration is good ,then you can not find real i.p.@mehroze malik

Unknown said...

i need real ip pawn-shop.cc
and dardania.de ?

nirav desai said...

dardania.de=210.167.190.56@ibraim reci

Unknown said...

HI ALL! pleas haelp me! What is IP adress of site http://erosx.lt? It says 188.165.227.84, but i dont understand it down, but website is on.. it is changed IP in another one no 188.165.227.84.

nirav desai said...

Ports are filtered, so it blocks your ping request.it allow only some specific i.p.@asilas gaidys

Unknown said...

how can i find real IP for this website "jr7e.com"

nirav desai said...

reela i.p= 65.110.47.140@hani hanii

Anonymous said...

I would love to get the real IP of the website pa-mdh.me, please.

Thank you so much!!!!

Unknown said...

ip for arena-tournament.com ??
Please and thx!

nirav desai said...

188.165.14.13@Jose Soto

Unknown said...

ip for pcworx.ph
thanks id advance

nirav desai said...

119.81.1.68@jeremiah pom

Anonymous said...

How do I fix my admin configurations so that the real ip doesn't leak via Cloudflare?

Anonymous said...

How do I setup my admin configurations so that the real ip isn't leaked via Cloudflare? And do I setup secure admin configurations at the server level or dns level or control panel level? I'd like clear instructions please.

Thanks

Unknown said...

How about the reverse.. how to make it so IP can't be found with these methods? =p

Unknown said...

ip for prankota.com??
Please and thx!

Unknown said...

ip for prankota.com ??
Please and thx!

BGC said...

How can I hide my ip against these methods?

Unknown said...

can i get this ip http://au.cybergamer.com/

Unknown said...

ip for au.cybergamer.com
thanks

@Zerquix18 *-* said...

Thanks you! I got it with ftp.domain.com :)

John Doe said...

Nice idea bro :D works great.. Thanks..

Unknown said...

ip for websitenoip.com
thank you.

Unknown said...

for ip jogar.miningbr.com?

bob said...

Thank you very much for your precious information however I couldn't manage to find real ip of coinad.com ... Could you please help me? Many thanks in advance!!

ixat.ca said...

if you can find http://zat.io real i,p you will be a god

Unknown said...

Could somebody get the real ip for waddleplus.com

Unknown said...

bootright.com - 104.28.6.193 (Cloud Flare ip)

Unknown said...

for ip http://www.jlotto.kr/ ?

Unknown said...

Could someone find the resl ip for rivalo.com

Unknown said...

real ip for peacehotel.my

Anonymous said...

eRosx.lt 91.211.244.125

Admin said...

If you can find http://www.seedfile.ro real IP you will be a god :)

Unknown said...

please give me the real ip of indiangilma.com . I will be thankful to you

Unknown said...

as indiangilma.com is protected by cloudflare and uploaded my pvt video and not removing after request several times. plz help me

Unknown said...

Can anyone please get the real IP of this site cvv.cx this under protected IP other than the cloudflare.

Unknown said...

I need to know real IP of lamchame.biz
Thanks!

Unknown said...

Hi if ist behinde pound reverse proxy then the site will not open hen you entering from IP. But if you retrive a domain name then site opens.
Very basic techniques to protect website from scanner like nikto and so on.

Mykel Paul Ogbe said...

nothing work for me please help me www.thenationonlineng.net

Ibrahim Irfan said...

ip for www.habboon.com?

Unknown said...

Can you find the real ip address of http://mubz.bg ty :)

nick said...

if you can find http://pumpmanpro.com/ real i,p Please and thx!

Admin said...

Hello, I wish real IP of andrija-i-andjelka.com. Please. Thanks in advance.

Unknown said...

@ryan fuhrman
waddleplus.com 31.220.43.241 NETHERLANDS

Unknown said...

waddleplus.com 31.220.43.241 NETHERLANDS

Unknown said...

plz give your facebook or Skype id so i will call u ???

Admin said...

andrija-i-andjelka.com please <3

Unknown said...

real Ip for h4kurd.com
please , thanks

annbuntin399 said...

Hi admin,
Can you help me for find real ip site: http://cardkingdom.com
Thanks!

Unknown said...

please can u help me with
guardarefilm.tv
thank in advance for you time
marco

Admin said...

ip for andrija-i-andjelka.com
thanks id advance

Nicenameforyou said...

I found out for you, the real host is: 1AND1.COM

@ryan fuhrman

Unknown said...

Hello. how can i find real IP for this website "named.com" Help me!

Unknown said...

Can you find directleaks.com ip?

Unknown said...

i cant find real ip of filma24.tv , can u?

pear said...

can you help me find real ip spscoin.co

Unknown said...

help me real ip sabahkini2.com

dtemp said...

can you tell me real ip of dtempcounselling.org

Post a Comment

UA-35960349-1