Are these IPs legit?


#1

I’m using CloudWays Digital Ocean server, Now no matter how much i increase the server the resources are still going down to 0.

I talked with them and they told me the following ips are hitting the server a heck lot of times.
70502 172.68.146.27
22970 172.68.144.74
22090 162.158.158.52
13598 162.158.122.103
11771 172.68.144.86
11753 172.68.144.236
11691 162.158.166.222
11666 172.68.146.159
11613 162.158.167.37
11516 172.68.146.117
11511 162.158.166.246
11481 172.69.134.214
11426 172.69.134.124
11275 172.68.144.140
11200 162.158.165.11

they told me to check and after check i saw each one of these are associated with cloudways. He suggestted me to block these.

If i block these will my site’s face any issue and what to do now?

Thanks


#2

Cloudflare proxies all web requests to your domain, so at the network level (as well as in log files without restoring original visitor IP) it will always show up as those IP addresses.

If you’re trying to find a culprit or bad IP spamming your server, use the link above or mod_cloudflare to restore the original visitor IP address.

If you think you’re being DDOS’d, and the attacking IP addresses are different, try turning on “i’m under attack” mode in firewall -> security level.


#3

So if i block these IPs, cloudflare won’t work on my site?


#4

Correct. Block any and allow CloudFlare only. That prevents bad guys accessing your server via it’s ip directly.


#5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.