5 ms·
I don't think that does you any good for Cloudflare, though. They will definitely be using SNI.
by jchw 2y ago
I don't think that does you any good for Cloudflare, though. They will definitely be using SNI.
- kelnos 2y agoThat doesn't really matter, though. While OP is using Cloudflare, the actual server behind it is still a publicly-accessible IP address that an IPv4 space scanner can easily stumble upon.
- jchw 2y agoI misunderstood, I thought the subdomain was an R2 bucket. If it's just normal Cloudflare proxying to some backend this is probably the most likely answer. That said, while I think it's not the case here, using Cloudflare doesn't mean the underlying host is accessible, as even on the free tier you can use Cloudflare Tunnels, which I often do.
- ratg13 2y agothey only state they are using cloudflare for DNS, they didn't say if they were proxying the connection
- jchw 2y agoAlso a valid point. I guess without more details all we can really do is speculate about the exact setup. That said, I do now agree that the most likely answer is "the underlying host was accessible and caught by an IPv4 scanner" since well, that's pretty much what it says anyway.
- deleted 2y ago[deleted]