check hosting via cloudflare ???

I have a question, SEO websites often use cloudflare, so is there any way for hackers or a third party to check the real hosting address when using cloudflare?

Sometimes. If the real ip address was connected to the dns before setting it up with cloudflare then there's probably a record of it.

Yes
Old Records, leaks, MX/Email Records and what not

Also very often mail A name on server not under cloundflare, so real IP can be visible on mail.domain.com pop.domain.com etc.

in most cases, hackers won’t easily access it, however, if they can find ways to bypass Cloudflare’s protection, like checking server logs or using DNS leaks, there is a risk of revealing the real hosting IP

NeedMyLink said:

in most cases, hackers won’t easily access it, however, if they can find ways to bypass Cloudflare’s protection, like checking server logs or using DNS leaks, there is a risk of revealing the real hosting IP

Click to expand...

I can ask if old DNS records are leaked where can I check

I think the government where you live can do that (I guess)

I know it might be frowned upon. But just sending a dmca claim to any of their URLS will get you their origin IP. Cloudflare automated the entire thing and have terrible checks if the DMCA is real or not.

Defeatenonce said:

I know it might be frowned upon. But just sending a dmca claim to any of their URLS will get you their origin IP. Cloudflare automated the entire thing and have terrible checks if the DMCA is real or not.

Click to expand...

is this true friend , as i am also using it , i wonder if there is any better solution

If you use Cloudflare, your real IP is hidden, but if your DNS settings are not configured correctly or there are vulnerabilities, a hacker could still find it. It is important to keep everything up to date and enable the protections that Cloudflare offers, such as WAF, to reduce the risk.

einjuanantonio said:

I can ask if old DNS records are leaked where can I check

Click to expand...

There are a number of such services, though I've not yet found one that is 100% accurate - I don't think it's possible without access to historical registrar data. Try these two:
https://completedns.com/dns-history/
https://osint.sh/dnshistory/

Both were able to track changes for one of my old domains from 2009 onwards.

Yes there are many.

Only if the real IP is shown. The real hosting is server and will make it hard for hackers.

When a website uses Cloudflare, it acts as a reverse proxy, masking the IP address of the real hosting server by routing traffic through Cloudflare's servers. However, it is still possible for hackers or third parties to try to obtain the real hosting address, but success depends on a variety of factors. If the website's DNS records were public before Cloudflare's implementation, tools such as SecurityTrails, DNSDumpster, or WHOIS history may reveal the original server IP. To avoid this, make sure to update DNS records only after Cloudflare is enabled. Subdomains that are not routed through Cloudflare (for example, direct IP access to FTP or mail servers) may expose the real IP. Attackers may use tools such as Sublist3r or Amass to scan for such configuration errors. Audit your DNS settings regularly to prevent this from happening. If the website or server is misconfigured, the real IP may be leaked in HTTP headers, email headers (such as SMTP), or error pages. For example, a poorly configured Nginx or Apache server may leak the original IP. Harden your server configuration and disable unnecessary services.