BungeeCord Backend Security

Hi there,

I am hosting my bungeecord proxy with a dedicated host. Is it possible for someone to find out my backend IP's with ip_forward disabled? What risks should I be aware of?

Thanks!