Hacker News Reader

How soon until botnets & malware routinely bypass DNS and instead use host files compiled from simple subdomain pings (and other vectors for IP address leaks) and passed about like password lists?

View on HN

If the target server is setup to only accept requests from certain IPs like the Cloudflare IPs then this shouldn't be a problem.

That doesn't seem to be common.

it would be if such a list got distributed. Simple IP tables or webserver config. Could you think of a way to make it easier?

Reply on news.ycombinator.com