Cloudflare DNS's 1111 resolver has been BGP-hijacked
this morning by AS58879
twitter.com
This is what you get for centralizing resources and trusting the botnet.
Cloudflare getting pwnd again
Josiah Green
Other urls found in this thread:
128.199.177.21
206.223.147.214
206.223.147.215
twitter.com
Zachary Wilson
This can happen to literally anything and is unstoppable because of how the packets are routed. Cloudflare literally did nothing wrong.
Jace Davis
quints confirm
Ryder Johnson
also, use OpenNIC
Kevin Foster
Many people seem to think that Cuckflare helps to protect against DDoS attacks. This is, in fact, incredibly easy to circumvent.
Cuckflare "protects" against DDoS by basically being a DNS-enforced MitM of you and the site it "protects". Therefore, finding the real IP address would enable one to circumvent the DDoS "protection".
The real IP address can be found easily for any website. First you need a tool which scans lots of IP addresses quickly. zmap is a reasonable choice. Then, you need to scan port 80 or 443 (depending on the site) and obtain a list of all addresses with those ports open. Afterwards, you download the front page of each of those (zgrab does it quickly) and search for a unique string only appearing in the site you target. This will net you the IP address of the site, which you can then attack at any time.
If you know the country the site is hosted in, that makes the scan even quicker and easier because you only need to scan a subset of all the possible IP addresses.
Someone give me a site which uses cuckflare which you want to obtain the real IP of; I can't think of any besides Zig Forums but we already know the real IP of that.
Tyler Morales
Get the fuck out of here, you worthless piece of shit. Pic very related.
James Stewart
You know what else is easy to circumvent? Your shitty attack.
Kayden Fisher
Perhaps it's easy to guard against, but many websites don't do so. 32chan is an example: 128.199.177.21
Dylan Bennett
Its retarded site owners, again nothing to do with cloudflare.
Parker Fisher
yeah the 32chan admin seem to be a bit retarded.
Josiah Gray
No one said otherwise, but it literally painted itself as a target when it announced that it was gratis and faster.
Because since when cloudflare isn't CIA nigger tier ?
Josiah Fisher
CloudFlare protects this site pretty well from you script kid assholes.
Grayson Moore
Implying I'm not aware of that.
.t Tor user.
Nathan Ward
HAHAHAHAHAHAHAHA
Zig Forums's real IP is 206.223.147.214
Protection my fucking ass
Xavier Kelly
Thats just one server user
Carter Gonzalez
If Zig Forums protects itself by having multiple servers, then cuckflare isn't relevant anyway.
tl;dr cuckflare is a useless flaming heap of MitM
Levi Gomez
There's another one at 206.223.147.215 as well
Michael Gray
Thats not how servers work user
Matthew Turner
You got BTFO in the IPFS thread didn't you?
Ayden Fisher
I love IPFS user.
Daniel Perez
...
Christian Garcia
Centralization promotes destruction.
Ethan Long
*Centralized services work now while distributed ones are fucked
FTFY
Jayden Garcia
I agree. Now when are you leaving Zig Forums forever.
Jack Watson
Anyone who would actually it as their DNS deserves it.
Owen Kelly
TCP/IP is a good system for computer intercommunication, rite guise?
Sebastian Powell
This has nothing to do with TCP. It is a problem with DNS, which can in theory be replaced without disturbing TCP at all.
Hunter Williams
shut the fuck up, cuck
syn flood every N IPs until your target site goes down (where N is proportional to the amount of bandwidth you have). also you can simply launch an application layer attack against the site and cuckflare will let it through (by design since no WAF can magically figure out that you're doing something that results in disproportionate computation on the server)
only retards use cuckflare in the first place
cuckflare protects against nothing. all it ever amounted to was blocking tor from all the webscale garbage on the internet (namely .io domains). this can be bypassed for 99.99999% of sites by using tor browser or setting your user agent to that of tor browser, for example my config in palemoon (works on firefux and any firefux fork):
general.useragent.override;Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0
Alexander Wood
hltv.org although im pretty sure i already have their ip, their site is out of date and doesnt even have captcha for logging in, they also had an sql leak before
Connor Evans
Remember: I love to suck cock!
Leo Hernandez
Tell me how you gonna resolve IP addresses securely when just one router between you and the destination is hijacked and does LARP spoofing? Pro tip: youre fucked kiddo, but proper systems like cjdns and GNUNet do not have this puroburemo.
Xavier Foster
...
Julian Jenkins
Nah, I block those botnet DNS in my firewall. Can't do much about CF proxy servers though. At least not until I go full gopher.
Christian Bell
Gopher is going to have anti DDOS proxies all the same.
Lucas Wilson
No, because the normies will never use it.
Jaxon Ortiz
normals aren't the ones doing ddos attacks.
Eli Russell
Yeah but they only attack sites where people will notice and care that it went offline. Almost nobody uses gopher, and those sites don't have CF proxy because there was never a need.
Logan Johnson
can you help me get the ip to gflclan.com, i have an sql leak from the site and want to see what more i can dig up
Elijah Collins
That site doesn't even use cloudflare, though. The IP is 192.99.230.204 (from nslookup).
Adrian Ross
working on it. should have the IP within 4 days or so