IP Library Granted Patent US 10,542,107
Granted Patent B2
US 10,542,107 · App. 16/241,863 · Granted Jan 21, 2020

Origin server protection notification

Inventor: Evan Johnson (San Francisco, CA)
Assignee: CLOUDFLARE, INC.
H04L67/26H04L43/065H04L61/1511H04L63/1433H04L67/02H04L67/10H04L67/1036
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,542,107
App. No.
16/241,863
Granted
Jan 21, 2020
Kind
B2
Abstract

Domain Name System (DNS) records of a single site are analyzed. A first one of the DNS records points to an IP address of a service. A second one of the DNS records is not pointed to an IP address of the service and is referencing the first DNS record. An electronic communication is transmitted to an operator for the single site that includes a notification that an IP address of the single site is exposed through the second DNS record.

Claims (32)

1. A method, comprising:

analyzing Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;

determining that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record; and

responsive to the determining, transmitting an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.

2. The method of claim 1 , wherein the first IP address and the second IP address are equivalent.

3. The method of claim 1 , wherein a DNS request for a domain of the first DNS record returns the first IP address of the proxy server of the service.

4. The method of claim 1 , wherein a DNS request for a domain of the second DNS record returns the third IP address of the origin server of the single site.

5. The method of claim 1 , wherein the notification further includes an instruction to resolve that the second DNS record of the single site is exposing the third IP address of the origin server of the single site.

6. The method of claim 5 , wherein the instruction includes an instruction to remove the second DNS record of the single site.

7. The method of claim 5 , wherein the second DNS record of the single site is an MX record that is running on the third IP address of the origin server of the single site, and wherein the instruction includes an instruction to use an email service that is running on a fourth IP address that is different than the third IP address of the origin server of the single site.

8. A non-transitory computer-readable medium storing instructions, which when executed by a set of one or more processors, cause the set of processors to perform operations comprising:

analyzing Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;

determining that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record; and

responsive to the determining, transmitting an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.

9. The non-transitory computer-readable medium of claim 8 , wherein the first IP address and the second IP address are equivalent.

10. The non-transitory computer-readable medium of claim 8 , wherein a DNS request for a domain of the first DNS record returns the first IP address of the proxy server of the service.

11. The non-transitory computer-readable medium of claim 8 , wherein a DNS request for a domain of the second DNS record returns the third IP address of the origin server of the single site.

12. The non-transitory computer-readable medium of claim 8 , wherein the notification further includes an instruction to resolve that the second DNS record of the single site is exposing the third IP address of the origin server of the single site.

13. The non-transitory computer-readable medium of claim 12 , wherein the instruction includes an instruction to remove the second DNS record of the single site.

14. The non-transitory computer-readable medium of claim 12 , wherein the second DNS record of the single site is an MX record that is running on the third IP address of the origin server of the single site, and wherein the instruction includes an instruction to use an email service that is running on a fourth IP address that is different than the third IP address of the origin server of the single site.

15. An apparatus, comprising:

a set of one or more processors;

a set of one or more non-transitory computer-readable mediums that store instructions, that when executed by the set of processors, cause the set of processors to perform the following:

analyze Domain Name System (DNS) records of a single site, wherein a first one of the DNS records of the single site points to a first IP address of a proxy server of a service;

determine that a second one of the DNS records of the single site is not pointed to a second IP address of the proxy server of the service and is referencing the first DNS record; and

responsive to the determination, transmit an electronic communication to an operator for the single site that includes a notification that a third IP address of an origin server of the single site is exposed through the second DNS record.

16. The apparatus of claim 15 , wherein the first IP address and the second IP address are equivalent.

17. The apparatus of claim 15 , wherein a DNS request for a domain of the first DNS record returns the first IP address of the proxy server of the service.

18. The apparatus of claim 15 , wherein a DNS request for a domain of the second DNS record returns the third IP address of the origin server of the single site.

19. The apparatus of claim 15 , wherein the notification further includes an instruction to resolve that the second DNS record of the single site is exposing the third IP address of the origin server of the single site.

20. The apparatus of claim 19 , wherein the instruction includes an instruction to remove the second DNS record of the single site.

21. The apparatus of claim 19 , wherein the second DNS record of the single site is an MX record that is running on the third IP address of the origin server of the single site, and wherein the instruction includes an instruction to use an email service that is running on a fourth IP address that is different than the third IP address of the origin server of the single site.

Assignments (2)
SECURITY INTEREST Recorded May 20, 2024
From: CLOUDFLARE, INC.
To: CITIBANK, N.A.
Reel/Frame 067472/0246 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 7, 2019
From: JOHNSON, EVAN
To: CLOUDFLARE, INC.
Reel/Frame 047923/0021 →
Continuity (3)
Continuation 15369711 · Dec 5, 2016
Provisional Application 62263608 · Dec 4, 2015
Related Publication 20190166215A1 · May 30, 2019