Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New security measure preventing IP return #163

Open
Justinzobel opened this issue Nov 30, 2022 · 7 comments
Open

New security measure preventing IP return #163

Justinzobel opened this issue Nov 30, 2022 · 7 comments

Comments

@Justinzobel
Copy link

When using via curl I got ifconfig.co needs to review the security of your connection before proceeding. among other HTML returned instead of my IP.

@shawnflanagan
Copy link

I am having the same issue. Looks like Cloudflare is causing it. If I call https://ifconfig.co/country-iso from my site hosted on Netlify, instead of returning the country ISO value it returns this HTML code:
Screen Shot 2022-11-30 at 2 10 19 PM

It was first noticed on one of my sites around 17 November 2022.

@cyounkins
Copy link

I'm seeing this as well. I want to add that on my network there is only one service polling for IP changes, once every two minutes. This is within the requested limit of 1 request per minute described on the website.

@gtirloni
Copy link

gtirloni commented Dec 15, 2022

Seeing the same issue while running the command from the front page.

$ curl -I ifconfig.co/
HTTP/1.1 503 Service Temporarily Unavailable
Date: Thu, 15 Dec 2022 18:48:51 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j1JjqfAnG4NwXMMxSN7hexCkfEaGYOqPXwH%2BRuZrXW5BH9CwQCXmGK9A8ugl3PUqWA032TM0vw5av9DEM3aHm6pKR4AgbUOfJksTKgcmX%2BFbytWcqXKSEahdfZlyJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77a15b19cea53711-MIA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

Alternative: dig +short txt ch whoami.cloudflare @1.0.0.1

@bennettp123
Copy link

bennettp123 commented Jan 9, 2023

I just noticed the same issue on an EC2 instance. I suspect this service is probably provided for free, so I can't imagine there's be much appetite for disabling captcha.

Alternative: dig +short txt ch whoami.cloudflare @1.0.0.1

Nice one, thanks!

Another alternative (using https, in case port 53 is blocked):

curl api.ipify.org

@hydrargyrum
Copy link

hydrargyrum commented Jan 21, 2023

Yes, ifconfig.co is worthless via curl, but api.ipify.org works fine!

@TheKigen
Copy link

It is just a security setting that needs to be changed on the CloudFlare account running ifconfig.co. I setup ipcfg.co as another. Though other than the front end its entirely rewritten to just be a CloudFlare Worker.

@ifconfigla
Copy link

Another alternative for curl and tor users

curl ifconfig.la

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants