Hiding your server's IP

The internet is constantly scanned by systems looking for open ports and the servers behind them. If one of them finds your backend's IP, attackers can hit your server directly and skip NeoProtect's protection entirely.

To prevent this, only allow connections to your server port from our edge IP addresses. Any firewall works for this: iptables, UFW, or a firewall provided by your host (Hetzner, OVH, and others). See the firewall guide for step-by-step instructions.

You can find our current IP addresses through our API:

• as JSON: api.neoprotect.net/v2/public/servers
• as plain text: api.neoprotect.net/v2/public/servers/txt

If an attack hits your server IP directly, your IP has leaked somewhere. Check for the leak on your end, such as an old DNS record (see DNS setup) or a missing firewall rule. Once you have fixed the leak, request a new server IP from your host through their support.

---

NOTE

Need a hand, for example setting up your firewall rules? Contact support.