News for hackers. Stuff that matters.

A comment on Cloudflare had a partial outage. Parent comment

Re:Cloudflare had a partial outage by londons_explore on Tuesday June 21, 2022 @04:09AM (#31821509)
The origin IP's are already open to attack for most users.

It's trivial to scan the whole IPv4 internet to find out which IP you are hosting your site on.

[ Parent | on HN ]
Re:Cloudflare had a partial outage by renonce on Tuesday June 21, 2022 @04:19AM (#31821575)
You need to block 443 for any other IP than Cloudflare. The IP list can be found at https://www.cloudflare.com/ips/.
[ Parent | on HN ]
Re:Cloudflare had a partial outage by dingdongthe on Tuesday June 21, 2022 @04:25AM (#31821621)
and/or use Authenticated Origin Pulls with a TLS client certificate.
[ Parent | on HN ]
Re:Cloudflare had a partial outage by renonce on Monday June 27, 2022 @08:58AM (#31893936)
That would leak your IP nevertheless. People can figure out that you're serving a specific website by inspecting your certificate on handshake without actually connecting.
[ Parent | on HN ]