Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


    Cloudron Forum

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular

    Cloudflare - Unauthorized Access Possible?

    Discuss
    3
    6
    200
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • neurokrish
      neurokrish last edited by neurokrish

      My Cloudron server is behind Cloudflare. I recently got an email from Cloudron saying that there is a new login to my a/c from this IP - 172.70.178.75. This happens to be that of Cloudflare. Has someone gained unauthorized access to my a/c or am I simply paranoid here?

      Of course, I have now changed the password and enabled 2FA.

      Thanks!

      robi 1 Reply Last reply Reply Quote 0
      • robi
        robi @neurokrish last edited by

        @neurokrish Generally no, as the API key is only good for managing the DNS records, not logging in.

        Life of Advanced Technology

        1 Reply Last reply Reply Quote 0
        • girish
          girish Staff last edited by

          Could just be you re-logging into your dashboard? The email message is for your Cloudron dashboard logins and not for usage of Cloudflare keys. Currently, we just track the last IPs that a person logged in from. I guess Cloudflare has a bunch of IPs, so I suspect the warning can be ignored.

          neurokrish 1 Reply Last reply Reply Quote 0
          • neurokrish
            neurokrish @girish last edited by

            @girish I suspect the same as well. Yes, I logged on to the dashboard. I will ignore this for now as I am not too worried with the 2FA enabled now.

            1 Reply Last reply Reply Quote 0
            • robi
              robi last edited by

              You can also check to see if that is your current IP 😉

              I think CF changed their security to notify on all logins..

              Life of Advanced Technology

              neurokrish 1 Reply Last reply Reply Quote 0
              • neurokrish
                neurokrish @robi last edited by

                @robi I checked my IP. It's not the one I posted. The IP probably changes as @girish mentioned.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Powered by NodeBB