<![CDATA[What is Cloudflare doing ? Some Cloudflare IP addresses are acting weird in my logs]]>I recently started seeing a bunch of probably malicious requests (probing for wordpress plugins on my lemmy host) coming from Cloudflare IP addresses. I do use Cloudflare for my nameservers, but the records are set to DNS only (not Proxy).

These requests all come from a Cloudflare IPv4, with 2a06:98c0:3600::103 as the X-Forwarded-For header, which VirusTotal also attributes to Cloudflare. There is nothing else in the X-Forwarded-For chain.

Does anyone know what is going on or have any hypothesis ?

]]>https://forum.ieu.app/topic/f4a56268-1349-47fd-8994-933eac8bb904/what-is-cloudflare-doing-some-cloudflare-ip-addresses-are-acting-weird-in-my-logsRSS for NodeThu, 22 Oct 2026 02:37:03 GMTTue, 29 Sep 2026 07:32:22 GMT60<![CDATA[Reply to What is Cloudflare doing ? Some Cloudflare IP addresses are acting weird in my logs on Tue, 29 Sep 2026 07:56:36 GMT]]>Cloudflare have "workers" that can run code, and anyone can create them, my guess is abuse? You can try contacting cloudflare.

]]>https://forum.ieu.app/post/https://lemmy.zip/comment/29130555https://forum.ieu.app/post/https://lemmy.zip/comment/29130555Tue, 29 Sep 2026 07:56:36 GMT