Message Board

Installing Honey Pots

Cloudflare compatibility

Author: A.Costa5 (22 Feb 22 6:39pm)

If a request is being trapped in the HoneyPot, how is the IP collected?

My website uses CloudFlare as a DNS Proxy, so the request IP address will be the CF IP.

The origin IP will be in a header CF-Connecting-IP.

My concern is that I will be trapping Cloudflare IPs. Not good idea :D

Does anyone knows?

Re: Cloudflare compatibility

Author: H.User1325 (23 Feb 22 1:07pm)

Costa5, I think you have a misunderstanding of how honey Pot works. have you read
https://www.projecthoneypot.org/about_us.php ?

Honey Pot is a multi-step process: The honey pot you installed does not collect the data. It does generate email addresses that are visible to, collected by, visitors to the honey pot.

When one of those generated email addresses are sent email/spam, then all the dots are connected.
1) HoneyPot looks at the header of the received email to identify who sent the email (the spammer). Like most spam, this may not be the same as the FROM: or Reply_To:
2) Knowing where the email address used was generated HoneyPot can connect the IP that collected the email address (from your honey Pot) and the IP address of the spammer (who sent spam to that address).

Re: Cloudflare compatibility

Author: G.Forrest2 (31 May 22 5:03pm)

Same issue here - when I load the honeypot page, I get "Cloudflare protected IP encountered.". Is there any way around this?