← Back to context

Comment by gruez

3 days ago

>cloudflare hosts the attackers.

No, they provide DDoS protection, but the actual servers are likely hosted on some random VPS somewhere.

When I do a lookup on beamed.st I get an IP in 2606:4700::/32 which is currently advertised from AS13335 "Cloudflare, Inc."

Edit: I now realize gruez meant the beamed.st site itself is behind Cloudflare DDoS, completing the loop to explaining what Cloudflare's involvement was :).