Tons of requests from Cloudflare server

I keep getting entries in my Apache logs (thousands of them):

141.101.104.74 - - [14/Apr/2021:21:15:38 +0200] “POST /path/save HTTP/1.1” 200 5416 “https://www.example.net/path/44440” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36”

I found that they come from the ip address 141.101.104.74 which is Cloudflare. It’s like a DDoS attack, but since it seems to be coming from Cloudflare itself, I don’t know if there is a way to mitigate the requests.
I believe it might have started after turning on Browser Insights under the Speed section. Turning it off again didn’t fix the issue though.

How can I stop Cloudflare from doing these requests? I tried contacting Cloudflare but since I’m on the free plan I don’t know if they will ever get back to me…

Philip

It sounds like your website is using Cloudflare, but your server is not restoring visitor IP addresses sent in the headers.

2 Likes

@sdayman you are awesome! I managed to log the correct ip address and the request is indeed not coming from Cloudflare. So I’m blocking the ip address now using a Cloudflare firewall rule.

You saved the day. Thanks.

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.