CURRYFINGER: SNI and Host header spoofing to find true IPs behind Cloudflare

Cloudflare provides their source addresses so you can protect your site by only responding to those addresses, which I believe protects you from discovery via this type of mechanism.

Source: https://github.com/tbiehn/CURRYFINGER