Cloudflare malicious connections to my server?

Discussion in 'Site & Server Administration' started by postcd, Apr 30, 2014.

0
  1. #1
    Hello, i thought cloudflare is used to serve content of webpage, but my website receiving connections like:

    [Wed Apr 30 05:13:08 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
[Wed Apr 30 05:13:08 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
[Wed Apr 30 05:13:12 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
[Wed Apr 30 05:13:16 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
[Wed Apr 30 05:13:16 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
[Wed Apr 30 05:13:17 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
[Wed Apr 30 05:13:17 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
[Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
[Wed Apr 30 05:13:24 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
[Wed Apr 30 05:13:24 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
[Wed Apr 30 05:13:27 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://sites.google.com/site/getimysuiteforfree/http://http://Www.topseo.net/buy-email-address-lists/browserstat.php
[Wed Apr 30 05:13:27 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://sites.google.com/site/getimysuiteforfree/http://http://Www.topseo.net/buy-email-address-lists/browserstat.php
    Code (markup):
    As you can see these are quite frequent connections and IP appears to be Cloudflare: http://myip.ms/info/whois/173.245.53.68

    How is that possible that someone quite anonymously spamming me by this into my error_log file and from CLoudflare IP?
     
    postcd, Apr 30, 2014 IP
  2. Shagoon

    Shagoon Notable Member

    Messages:
    596
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    220
    #2
    Do you use CloudFlare on your website?

    Cause if you do you will have to install an Apache mod called mod_cloudflare: https://www.cloudflare.com/resources-downloads

    Without that mod installed in your Apache, the Apache logs see every visitor as CloudFlare IP Address, not the visitor's real IP address... because all your visitors are accessing your website via the CloudFlare front network.
     
    Shagoon, Apr 30, 2014 IP
  3. damoncloudflare

    damoncloudflare Greenhorn

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    16
    #3
    CloudFlare isn't attacking you. Our IPs are going to show because we're a reverse proxy for sites & the directions above re: mod_cloudflare are correct.
     
    damoncloudflare, May 1, 2014 IP