Seeing the real IP with Censys

I found this website https://search.censys.io/ that shows the real ip’s behind Cloudflare.

How can we prevent the real IP from showing so easily?

If you’re listed there, it’s likely because your origin is accepting direct connections from outside of Cloudflare. Censys will scan your origin for open ports and such.

While you can specifically block Censys connections, you should secure your origin instead. Blocking Censys-specific ranges alone won’t stop any other similar scanners though, nor will it block such attack vectors for bad actors.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.