Findings documented on 05/05/2022.
IP of the client is kept under the Cloudflare network.
$ curl cloudflare.com/cdn-cgi/trace
fl=50f60
h=cloudflare.com
ip=85.117.236.245
ts=1651659753.793
visit_scheme=http
uag=curl/7.68.0
colo=OTP
http=http/1.1
loc=TR
tls=off
sni=off
warp=on
gateway=off
Public IP is registered to the country of the WARP server.
ip: "85.117.236.245",
city: "Istanbul",
region: "Istanbul",
country: "TR",
loc: "41.0153,28.9827",
org: "AS210099 TIGOVA BILISIM A.S.",
postal: "34112",
timezone: "Europe/Istanbul",
ip: "37.120.152.237",
city: "Sofia",
region: "Sofia-Capital",
country: "BG",
loc: "42.6975,23.3241",
org: "AS9009 M247 Ltd",
postal: "1000",
timezone: "Europe/Sofia",
ip: "31.223.26.54",
city: "İzmir",
region: "İzmir",
country: "TR",
loc: "38.4127,27.1384",
org: "AS12735 TurkNet Iletisim Hizmetleri A.S.",
postal: "35210",
timezone: "Europe/Istanbul",
ip: "104.28.244.147",
city: "Istanbul",
region: "Istanbul",
country: "TR",
loc: "41.0138,28.9497",
org: "AS13335 Cloudflare, Inc.",
postal: "34096",
timezone: "Europe/Istanbul",
ip: "104.28.214.57",
city: "Sofia",
region: "Sofia-Capital",
country: "BG",
loc: "42.6975,23.3241",
org: "AS13335 Cloudflare, Inc.",
postal: "1000",
timezone: "Europe/Sofia",
ip: "104.28.249.210",
city: "İzmir",
region: "İzmir",
country: "TR",
loc: "38.4127,27.1384",
org: "AS13335 Cloudflare, Inc.",
postal: "35210",
timezone: "Europe/Istanbul",
Cloudflare IP is used everywhere, including the Cloudflare network.
$ curl cloudflare.com/cdn-cgi/trace
fl=472f453
h=cloudflare.com
ip=104.28.214.53
ts=1651731713.657
visit_scheme=http
uag=curl/7.68.0
colo=FRA
http=http/1.1
loc=BG
tls=off
sni=off
warp=plus
gateway=off
WebRTC leaks a public IP which is registered to the country of the WARP server.
Connection from Istanbul is routed to the Romania OTP server.
Connection from Sofia is routed to the Germany FRA server.
