Cloudflare malicious connections to my server?

Discussion in 'Linux Networking' started by postcd, Apr 30, 2014.

  1. postcd

    postcd Member

    Messages:
    34
    Likes Received:
    5
    Trophy Points:
    8
    Hello, i thought cloudflare is used to serve content of webpage, but my website receiving connections like:

    Code:
    [Wed Apr 30 05:13:08 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
    [Wed Apr 30 05:13:08 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
    [Wed Apr 30 05:13:12 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Fake%20Oakleys%20Sunglassess[/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/http://https://www.facebook.com/pagesstat.php
    [Wed Apr 30 05:13:16 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
    [Wed Apr 30 05:13:16 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
    [Wed Apr 30 05:13:17 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
    [Wed Apr 30 05:13:17 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/http://https://www.kleid.mx35.de/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/browserstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/doc/doc/http://https://www.facebook.com/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Wholesale%20Oakley%20Sunglassess[/weekstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
    [Wed Apr 30 05:13:23 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
    [Wed Apr 30 05:13:24 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/refstat.php, referer: http://www.mywebsitehere.com/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
    [Wed Apr 30 05:13:24 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/refstat.php/http://https://My.lowesgrove.dpsnc.net/groups/trial/wiki/1e324/http://[url=http://www.arab-ipu.org/cheapoakleys.html]Cheap%20Oakley[/systemstat.php
    [Wed Apr 30 05:13:27 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/counter, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://sites.google.com/site/getimysuiteforfree/http://http://Www.topseo.net/buy-email-address-lists/browserstat.php
    [Wed Apr 30 05:13:27 2014] [error] [client 173.245.53.68] File does not exist: /home/myusername/public_html/404.shtml, referer: http://www.mywebsitehere.com/counter/refstat.php/doc/doc/http://https://sites.google.com/site/getimysuiteforfree/http://http://Www.topseo.net/buy-email-address-lists/browserstat.php
    As you can see these are quite frequent connections and IP appears to be Cloudflare: http://myip.ms/info/whois/173.245.53.68


    How is that possible that someone quite anonymously spamming me by this into my error_log file ?
  2. Rob

    Rob Administrator Staff Member

    Messages:
    573
    Likes Received:
    183
    Trophy Points:
    43
    I'd shoot an email to abuse@cloudflare.com .. and block the IP with your software firewall (iptables, csf, etc..).

Share This Page