CloudFlare.

Discussion in 'Legal Issues' started by Bruce McGivern, Jan 7, 2013.

  1. #1
    "CloudFlare" (cloudflare.com) are hiding the host of various attack sites / piracy sites.

    How do you get in contact with whoever the 'real' host is?
     
    Bruce McGivern, Jan 7, 2013 IP
  2. Dave Zan

    Dave Zan Well-Known Member

    Messages:
    2,320
    Likes Received:
    121
    Best Answers:
    2
    Trophy Points:
    115
  3. Bruce McGivern

    Bruce McGivern Well-Known Member

    Messages:
    364
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    110
    #3
    They're only a reverse proxy, so they don't host the actual content. They say that if you make a legit complaint, they must give the name of the real host. They say phishing reports will be ignored. They had asked that I supply my government issued I.D. in a report, but I'm not willing to do that even if I had it, for they may pass it on to the very people I'm complaining about.
     
    Bruce McGivern, Jan 8, 2013 IP
  4. vangel

    vangel Active Member

    Messages:
    145
    Likes Received:
    6
    Best Answers:
    2
    Trophy Points:
    98
    #4
    the amount trolls and spammers asking for info are FAR FAR greater than legit complaints. If I had a genuine issue I woulld provide "some form" of identification since I am claiming some legalese. Therefore i would want that the defendent know who I am.
     
    vangel, Jan 10, 2013 IP
  5. ryan_uk

    ryan_uk Illustrious Member

    Messages:
    3,983
    Likes Received:
    1,022
    Best Answers:
    33
    Trophy Points:
    465
    #5
    I haven't tried any of the following, but there's no reason why you shouldn't be able to get the true IP from a subdomain like ftp/mail or other commonly used ones:

    http://tipstrickshack.blogspot.co.uk/2012/11/how-to-find-real-ip-protected-by-cloud.html

    From the IP, you will be able to track down the host. If you need any help with that, just ask.

    All the best, mate.
     
    ryan_uk, Jan 11, 2013 IP
    Johnny Mnemonic likes this.
  6. Bruce McGivern

    Bruce McGivern Well-Known Member

    Messages:
    364
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    110
    #6
    Thanks. Although would it not just be their ISP sanctioned IP in the emails and not the IP of the web host?
     
    Bruce McGivern, Jan 13, 2013 IP
  7. ryan_uk

    ryan_uk Illustrious Member

    Messages:
    3,983
    Likes Received:
    1,022
    Best Answers:
    33
    Trophy Points:
    465
    #7
    Well, more often than not, mail.domain.com resolves to the same server IP the website is on. Yes, some webhosts have different configurations (for example, mine has totally different servers for downloading mail from, but mail.domain.com does resolve to the same IP address that my websites are on).

    Even if it is different and not the exact server, you've got the webhost's name now and they should be able to figure out which server it's on, so that's a really big step forward in being able to resolve this issue. Anyway, there's always ftp.domain.com, cpanel.domain.com and similar to try (and even compare to the mail.domain.com IP).

    Good luck, mate!
     
    ryan_uk, Jan 13, 2013 IP
  8. Bruce McGivern

    Bruce McGivern Well-Known Member

    Messages:
    364
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    110
    #8
    LOL. I get the general idea, but it just feels awfully wizardry to me. If you could perhaps post up their IP on here, that would be cool, man.

    Have you had problems with ED too? There is a blog about them, but it's not been updated in months. The person who updates on there used to send me emails helping me obtain their host. It was so much simpler when they were hosted in America, but they've been elsewhere for quite a while and since the blog never gets updated, my leads have dried up.

    http://josephevers.blogspot.com
     
    Bruce McGivern, Jan 13, 2013 IP
  9. ryan_uk

    ryan_uk Illustrious Member

    Messages:
    3,983
    Likes Received:
    1,022
    Best Answers:
    33
    Trophy Points:
    465
    #9
    You have private messaging disabled, mate, otherwise I would contact you about it.
     
    ryan_uk, Jan 13, 2013 IP
  10. Bruce McGivern

    Bruce McGivern Well-Known Member

    Messages:
    364
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    110
    #10
    Oh, right...

    Yeah, I sort of disallow anyone to contact me directly on forums. But I will put the PM feature back on.
     
    Bruce McGivern, Jan 13, 2013 IP