Origin server protection notification
AssigneeCloudflare, Inc.
InventorEvan Johnson
Life of this patent
Estimating the term…
Abstract
Domain Name System (DNS) records of a single site are analyzed. A first one of the DNS records points to an IP address of a service. A second one of the DNS records is not pointed to an IP address of the service and is referencing the first DNS record. An electronic communication is transmitted to an operator for the single site that includes a notification that an IP address of the single site is exposed through the second DNS record.
Claims21
A method, comprising:
- analyzing Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;
- determining that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record;
- and
- responsive to the determining, transmitting an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.
A non-transitory computer-readable medium storing instructions, which when executed by a set of one or more processors, cause the set of processors to perform operations comprising:
- analyzing Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;
- determining that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record;
- and
- responsive to the determining, transmitting an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.
An apparatus, comprising:
- a set of one or more processors;
- a set of one or more non-transitory computer-readable mediums that store instructions, that when executed by the set of processors, cause the set of processors to perform the following:
- analyze Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;
- determine that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record;
- and
- responsive to the determination, transmit an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.
Dependencies are inferred from the claim text.