15 ms·

Hacker News uses Cloudflare: http://bgp.he.net/dns/news.ycombinator.com#_ipinfo http://bgp.he.net/dns/news.ycombinator.com#_ipinfo Add the following to your ho

• deleted 10y ago
  [deleted]
• misframer 10y ago
  How did you find that IP?
  • ers35 10y ago
    I used Censys to search for the IPv4 addresses of servers serving matching TLS certificates: https://censys.io/ipv4?q=443.https.tls.certificate.parsed.names%3A+*.ycombinator.com https://censys.io/ipv4?q=443.https.tls.certificate.parsed.na...
    • ndesaulniers 10y ago
      Couldn't someone DDoS'ing a site use this to get around Cloudflare "protection?" Uh, asking for a friend.
      • ers35 10y ago
        Yes. One can identify the IP address of the origin server behind a reverse proxy if the server responds to direct requests in a way that identifies itself. See: https://cloudpiercer.org/ https://cloudpiercer.org/ Two steps towards obscuring the origin server include requiring that the HTTP Host header is set and only responding to Cloudflare IP ranges: https://www.cloudflare.com/ips/ https://www.cloudflare.com/ips/
  • belovedeagle 10y ago
    (not op) Well as it happens, Cloudflare has had this massive data leak you might have heard of...