31
What is Cloudflare doing ? Some Cloudflare IP addresses are acting weird in my logs (lemmy.pierre-couy.fr)
submitted 1 month ago by to c/selfhosted@lemmy.world
9 comments fedilink hide all child comments
 

I recently started seeing a bunch of probably malicious requests (probing for wordpress plugins on my lemmy host) coming from Cloudflare IP addresses. I do use Cloudflare for my nameservers, but the records are set to DNS only (not Proxy).

These requests all come from a Cloudflare IPv4, with 2a06:98c0:3600::103 as the X-Forwarded-For header, which VirusTotal also attributes to Cloudflare. There is nothing else in the X-Forwarded-For chain.

Does anyone know what is going on or have any hypothesis ?

you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 1 month ago

Cloudflare have "workers" that can run code, and anyone can create them, my guess is abuse? You can try contacting cloudflare.

  • permalink
  • fedilink
  • source
    •