Unknown IP was added to IP access rules

Today I want to show clients how to allowlist IPs, so I login to my Cloudflare account.
In
Security → WAF → Tools → IP Access Rules
I saw 19 IPs was allowed to All websites in account:
220.128.78.17
37.247.52.222
167.88.160.223
172.96.211.60
103.56.217.214
47.89.43.206
104.128.239.84
109.73.230.209
168.235.77.22
172.110.31.171
174.139.168.156
76.74.237.226
216.189.158.157
172.110.7.149
23.94.239.101
50.87.248.57
64.140.159.235
107.155.79.146

They belong to different hosting companies.

Does it because I enabled something?

Or my account was hacked?

It looks like it. Please follow the instructions in the link below and make sure to also review the security of your email account(s).

3 Likes