Use cloudflare nodes to attack?

Website, Application, Performance Security
1

From the website log, it is found that the IP segment from the cloudflare node: 172.69.0.0/24, they have been visiting the non-existent URL.

Part of the log:

2021/01/31 20:05:51 [error] 56974#0: *87455 “/www/wwwroot/www.a.com/xs/88/88950/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88950/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:05:51 [error] 56974#0: *87455 “/www/wwwroot/www.a.com/xs/88/88950/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88950/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:05:58 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88951/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88951/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:05:58 [error] 56982#0: *89380 “/www/wwwroot/www.a.com/xs/88/88951/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88951/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:07 [error] 56984#0: *89529 “/www/wwwroot/www.a.com/xs/88/88952/index.html” is not found (2: No such file or directory), client: 108.162.215.173, server: www.a.com, request: “GET /xs/88/88952/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:07 [error] 56979#0: *89547 “/www/wwwroot/www.a.com/xs/88/88952/index.html” is not found (2: No such file or directory), client: 108.162.215.172, server: www.a.com, request: “GET /xs/88/88952/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:15 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88953/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88953/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:16 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88953/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88953/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:25 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88954/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88954/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:25 [error] 56978#0: *89303 “/www/wwwroot/www.a.com/xs/88/88954/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88954/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:33 [error] 56984#0: *89133 “/www/wwwroot/www.a.com/xs/88/88955/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88955/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:33 [error] 56981#0: *83972 “/www/wwwroot/www.a.com/xs/88/88955/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88955/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:40 [error] 56984#0: *89529 “/www/wwwroot/www.a.com/xs/88/88956/index.html” is not found (2: No such file or directory), client: 108.162.215.173, server: www.a.com, request: “GET /xs/88/88956/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:40 [error] 56982#0: *89579 “/www/wwwroot/www.a.com/xs/88/88956/index.html” is not found (2: No such file or directory), client: 108.162.215.173, server: www.a.com, request: “GET /xs/88/88956/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:50 [error] 56982#0: *89380 “/www/wwwroot/www.a.com/xs/88/88957/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88957/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:50 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88957/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88957/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:58 [error] 56980#0: *89298 “/www/wwwroot/www.a.com/xs/88/88958/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88958/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:06:58 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88958/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88958/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:07 [error] 56981#0: *83972 “/www/wwwroot/www.a.com/xs/88/88959/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88959/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:07 [error] 56984#0: *89133 “/www/wwwroot/www.a.com/xs/88/88959/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88959/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:15 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88960/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88960/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:15 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88960/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88960/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:23 [error] 56982#0: *89123 “/www/wwwroot/www.a.com/xs/88/88961/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88961/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:23 [error] 56982#0: *89380 “/www/wwwroot/www.a.com/xs/88/88961/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88961/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:31 [error] 56977#0: *84658 “/www/wwwroot/www.a.com/xs/88/88962/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88962/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:31 [error] 56982#0: *83913 “/www/wwwroot/www.a.com/xs/88/88962/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88962/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:40 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88963/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88963/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:40 [error] 56984#0: *89318 “/www/wwwroot/www.a.com/xs/88/88963/index.html” is not found (2: No such file or directory), client: 108.162.215.250, server: www.a.com, request: “GET /xs/88/88963/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:48 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88964/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88964/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:48 [error] 56982#0: *89380 “/www/wwwroot/www.a.com/xs/88/88964/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88964/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:57 [error] 56982#0: *89123 “/www/wwwroot/www.a.com/xs/88/88965/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88965/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:07:57 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88965/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88965/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:05 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88966/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88966/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:05 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88966/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88966/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:14 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88967/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88967/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:14 [error] 56982#0: *89380 “/www/wwwroot/www.a.com/xs/88/88967/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88967/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:23 [error] 56982#0: *88739 “/www/wwwroot/www.a.com/xs/88/88968/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88968/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:23 [error] 56981#0: *83972 “/www/wwwroot/www.a.com/xs/88/88968/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88968/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:30 [error] 56979#0: *91569 “/www/wwwroot/www.a.com/xs/88/88969/index.html” is not found (2: No such file or directory), client: 172.69.35.200, server: www.a.com, request: “GET /xs/88/88969/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:30 [error] 56986#0: *92107 “/www/wwwroot/www.a.com/xs/88/88969/index.html” is not found (2: No such file or directory), client: 172.69.35.199, server: www.a.com, request: “GET /xs/88/88969/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:38 [error] 56978#0: *89303 “/www/wwwroot/www.a.com/xs/88/88970/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88970/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:38 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88970/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88970/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:47 [error] 56984#0: *88587 “/www/wwwroot/www.a.com/xs/88/88971/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88971/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”
2021/01/31 20:08:47 [error] 56979#0: *89306 “/www/wwwroot/www.a.com/xs/88/88971/index.html” is not found (2: No such file or directory), client: 172.69.33.4, server: www.a.com, request: “GET /xs/88/88971/ HTTP/1.1”, host: “www.a.com”, referrer: “a.com”

2

The incident is ongoing.
WEB logs have been increasing.

3

Is that web server the Origin for a Cloudflare proxied domain?

Are you on a shared hosting platform?

You can restore the original user IP by following the instructions here.

4

This is an independent server.

5

If you are not using Cloudflare to proxy traffic to that server then I’d do two things.

  1. Block all traffic from Cloudflare , using IPTables or similar. You can find their IP ranges here. This should eliminate the bulk of the problem.

  2. File an abuse complaint with Cloudflares Trust and Safety team here:
    Abuse approach - Cloudflare

This could be an innocent mistake by a Cloudflare customer (like a typo in their origin IP config), or something deliberately targeting you.

6

Thanks, I think I have found the attacker IP.

7

This topic was automatically closed after 30 days. New replies are no longer allowed.