Long overdue. On-going collection of Cloudflare abuse in one place. Domains and URLs to start, then I’ll get hunts added for tunnels and other shenanigans.
https://github.com/BadSamuraiDev/bs-lists/blob/main/cloudflare.md
Why would it be a waste of no time?
They rather often will kick people of their service or just warn list the domain in my experience
Or just to make hunting them easier ?
@badsamurai cool! Didn’t know about this one:
Block (or limit) access to the login at dash.cloudflare.com. Especially if you are not a Cloudflare customer. This is a low-regret technique to reduce shadow cloud and dev sprawl on Cloudflare.
@deepthoughts10 The repo has a couple block lists for cloud providers and domain registrar login/auth pages (North American focus for now). They’re pretty effective at limiting unauthorized sprawl from shadow ops run on P-cards.