<![CDATA[What is Cloudflare doing ? Some Cloudflare IP addresses are acting weird in my logs]]>I recently started seeing a bunch of probably malicious requests (probing for wordpress plugins on my lemmy host) coming from Cloudflare IP addresses. I do use Cloudflare for my nameservers, but the records are set to DNS only (not Proxy).

These requests all come from a Cloudflare IPv4, with 2a06:98c0:3600::103 as the X-Forwarded-For header, which VirusTotal also attributes to Cloudflare. There is nothing else in the X-Forwarded-For chain.

Does anyone know what is going on or have any hypothesis ?

]]>https://forum.ieu.app/topic/36156ee4-df6b-4f96-b434-c877fc797c36/what-is-cloudflare-doing-some-cloudflare-ip-addresses-are-acting-weird-in-my-logsRSS for NodeWed, 21 Oct 2026 22:47:11 GMTTue, 29 Sep 2026 07:32:22 GMT60