Hacker News new | ask | show | jobs
by supakeen 2842 days ago
A whois on the 35.241.245.36 returns a ownership by Google with the following comment:

Comment: * The IP addresses under this Org-ID are in use by Google Cloud customers *

He then uses the SSRF to issue a request to his own server after which he likely realizes that the IP address belonging to the backend service also runs on GCP.