Lots of outbound connections going to 2 cloudflare IPs

Website, Application, Performance DNS & Network
1

Hello,

I noticed a lot of outbound connections on my server, going in bursts, sometimes more than 20 per seconds.

They point towards Cloudflare IP addresses 104.27.176.32 and 104.27.177.32

Did anyone already noticed something similar? Any idea of where this can come from?

Thanks!

2

Connections or data packets? If it is the latter I’d say it simply is responses to the proxies. If it is actual connections you need check what you are running on your machine, possibly Argo or Railgun or something of that sort.

3

Hi Sandro,

Thank you for your quick answer,

I believe it’s connections, as I don’t have a dedicated server the logs are pretty basic. They are marked as outbound connections and it also correlate with an increase of TCP connections on my mysql database.
I don’t have Argo nor Railgun enabled.

Would it be possible that it’s a wordpress plugin trying to connect to a Cloudflare hosted website?

4

That certainly is a possibility. Could be even your own site.

5

Ok, thanks a lot!

I will try to investigate further, as it’s really not normal it’s doing crazy connections bursts like this.

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.