Cloudflare?


goscrewyourselves

I'm the one
While I have not seen any references to this Cloud flare thing, I was wondering if MTF uses it?

If this forum does use it - those responsible might want to do some research on it, especially a thing called the "Honey Pot Project" - a project that was picked up by US Homeland Security and a project that built by those who built and run Cloud Flare ... Read into that anything you want - but do the research first ;)

If here does not use the thing, then all is good! :)
 
While I have not seen any references to this Cloud flare thing, I was wondering if MTF uses it?

If this forum does use it - those responsible might want to do some research on it, especially a thing called the "Honey Pot Project" - a project that was picked up by US Homeland Security and a project that built by those who built and run Cloud Flare ... Read into that anything you want - but do the research first ;)

If here does not use the thing, then all is good! :)
As far as i know Cloudflare is an edge network that many sites (and i think some hosting providers) use to protect themselves from certain things. The honey pot project i believe is a layer of security to trap spammers and fraudsters.
I am not sure but i would have thought it would all be overkill for a not -too- busy forum site (although whoever is hosting it might use it).

I ran a route trace on this site, and these are the hops after it left the node in stockholm:

7 11 ms 10 ms 14 ms ae-11.edge4.Stockholm2.Level3.net [4.68.106.129]
8 168 ms 169 ms 166 ms ae1.37.bar4.SaltLakeCity1.level3.net [4.69.219.58]
9 181 ms 183 ms 180 ms 4.53.7.174
10 179 ms 180 ms 180 ms 69-195-64-111.unifiedlayer.com [69.195.64.111]
11 181 ms 181 ms 182 ms po97.prv-leaf3a.net.unifiedlayer.com [162.144.240.43]
12 179 ms 180 ms 180 ms 142-4-31-10.unifiedlayer.com [142.4.31.10]

Trace complete.
I can't see any cloudflare domains in there so probably not?

PS: .buuut.. it might be hopping the DNS too so to find that out we do;

nslookup www.modelrailroadforums.com
Server: anyresolver1.comhem.se
Address: 83.255.255.1

Non-authoritative answer:
Name: www.modelrailroadforums.com
Address: 142.4.31.10

then on linux you can use:

whois -h whois.arin.net n 142.4.31.10 | egrep 'Organization'
or on windows, mac or linux goto some whois service like This should show if Cloudflare is involved.

I did not see anything for this site but for example for VIMEO.COM:
anyresolver1.comhem.se
Address: 83.255.255.1
Non-authoritative answer:
Name: vimeo.com Addresses: 162.159.138.60 162.159.128.61
then do a WHOIS;
NetRange: 162.158.0.0 - 162.159.255.255
CIDR: 162.158.0.0/15
NetName: CLOUDFLARENET

However for this site i am seeing:
NetRange: 142.4.0.0 - 142.4.31.255
CIDR: 142.4.0.0/19
NetName: UNIFIEDLAYER-NETWORK-10
and on the "mysteryIP" 4.53.7.174 from our tracert
NetRange: 4.0.0.0 - 4.127.255.255
CIDR: 4.0.0.0/9
NetName: LVLT-ORG-4-8


So no i am now mostly certain they are not involved. Although to be honest i dont think anyone here needs to get worried, I think the powers that be have more to worry about than model trains :D
 
Last edited:
Just updated the info above. Incidently I had a meeting with someone from our SEC team today who used to work for Cloudflare so i could ask him, Basically you might not see them in a tracert (depending, despite them being the man in the middle, some things may not respond or just give an IP, or other DNS name)
While that can be step one i have PSed a better way above to find out if they are controlling or "proxying" the DNS.

Sorry for the missinfo but i always thought of them as the man in the middle, and the trace would have ended at them.. but it is a little more complex than that.

PS: There is a simplified explaination about what it is here:
 
Last edited:



Back
Top