The domain radiorsn .de was found on abuseipdb
Can anyone help me how to protect myself or change my IP from Cloudflare or better secure it?
I need help very quickly
The domain radiorsn .de was found on abuseipdb
Can anyone help me how to protect myself or change my IP from Cloudflare or better secure it?
I need help very quickly
Welcome to the Cloudflare Community.
The domain you referenced does not appear in your screenshot.
You don’t any input into what IP is returned by proxied DNS records. They may not even be the same in different regions or even at different times. When I entered the domain you shared into the AbuseIPDB search, it did not resolve to a listed IP.
Considering that Cloudflare IPs are used to proxy incoming requests to servers and not for traffic origination, it seems unlikely that Cloudflare IPs should find themselves on the AbuseIPDB list. Even if your site did resolve to a Cloudflare IP that somehow was listed in the AbuseIPDB there would be little reason to be concerned about, considering that your servers traffic would still originate from your server behind the Cloudflare proxy and not the Cloudflare proxy IP.
Can you be more specific what sort of protection you seek? It would be helpful if you describe in detail what has you concerned.
if I check the domain every few minutes, I always get a different IP. I also often get these messages in my events: what can I do to safely block these attacks, i.e. this brute force
I have already created a rule with the country Tor to block them, but I now have one from the USA and the Netherlands. What do I have to specify in the filter if I want to protect myself from this if the country is not “Tor”.
If you don’t actually use it, silencing xmlrpc noise is trivial. Simply block all access outright. If you use Jetpack, you can allow access exclusively from Automattic’s ASN.
You can limit Brute Force attempts by using things like Browser Integrity Check and Bot Fight Mode. I find these are better than approaches such as blocking TOR which go both too far and not far enough at the same time.
I don’t have any quick how-to guide that I can share, but there are some relevant articles here.
You will find links to brute force and bot topics among others in the following Tutorial.
Other practices such as requiring 2FA on your WordPress site can go a long way to help keep it safe.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.