FlareSolverr attempting to connect to 4chan

[Woody-Stock]

Have you checked our README?

• I have checked the README

Have you followed our Troubleshooting?

• I have followed your Troubleshooting

Is there already an issue for your problem?

• I have checked older issues, open and closed

Have you checked the discussions?

• I have read the Discussions

Environment

- FlareSolverr version: 3.3.6
- Last working FlareSolverr version: 3.3.5
- Operating system: Win 10
- Are you using Docker: no
- FlareSolverr User-Agent (see log traces or / endpoint):
- Are you using a VPN: no
- Are you using a Proxy: SmartDNS (not sure if it qualifies)
- Are you using Captcha Solver: no
- If using captcha solver, which one:
- URL to test this issue:

Description

I apologize in advance if it turns out it's an issue with my computer and not the app itself, at this point I'm really not sure and am really puzzled.

Yesterday evening, FlareSolverr started logging requests for 4chan, which is very strange as it is not one of my indexers. I don't know 4chan but a quick look online shows it's a forum and not an indexer.
It keeps "flooding" the app and I had to disable it because it maxed CPU ressources.

I first thought someone hacked either my Jackett and/or Prowlarr (I use both), but if I disable both services and launch FlareSolverr, it still happens.

I did an AV scan and a MalewareBytes one, nothing. I rebooted, launching ONLY FlareSolverr (to see if it was any other soft interfering with it) and it still happens.

What am I missing? Is this happening to anyone else?

Logged Error Messages

2023-09-17 11:22:08 INFO     FlareSolverr 3.3.6
2023-09-17 11:22:08 INFO     Testing web browser installation...
2023-09-17 11:22:08 INFO     Platform: Windows-10-10.0.19045-SP0
2023-09-17 11:22:08 INFO     Chrome / Chromium path: D:\Applis\flaresolverr\chrome\chrome.exe
2023-09-17 11:22:08 INFO     Chrome / Chromium major version: 115
2023-09-17 11:22:08 INFO     Launching web browser...
2023-09-17 11:22:12 INFO     FlareSolverr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36
2023-09-17 11:22:12 INFO     Test successful!
2023-09-17 11:22:12 INFO     Serving on http://0.0.0.0:8191
2023-09-17 11:22:13 INFO     Incoming request => POST /v1 body: {'cmd': 'request.get', 'url': 'https://4chan.org', 'maxTimeout': 60000}
2023-09-17 11:22:13 INFO     Incoming request => POST /v1 body: {'cmd': 'request.get', 'url': 'https://4chan.org', 'maxTimeout': 60000}
2023-09-17 11:22:13 INFO     Incoming request => POST /v1 body: {'cmd': 'request.get', 'url': 'https://4chan.org', 'maxTimeout': 60000}
2023-09-17 11:22:14 INFO     Incoming request => POST /v1 body: {'cmd': 'request.get', 'url': 'https://4chan.org', 'maxTimeout': 60000}
2023-09-17 11:22:15 INFO     Challenge detected. Selector found: #challenge-spinner
2023-09-17 11:22:15 WARNING  Task queue depth is 1
2023-09-17 11:22:16 WARNING  Task queue depth is 2
2023-09-17 11:22:16 INFO     Challenge detected. Selector found: #challenge-spinner
2023-09-17 11:22:16 INFO     Challenge detected. Selector found: #challenge-spinner
2023-09-17 11:22:16 INFO     Challenge detected. Selector found: #challenge-spinner
2023-09-17 11:22:16 WARNING  Task queue depth is 3
2023-09-17 11:22:17 WARNING  Task queue depth is 4
2023-09-17 11:22:20 WARNING  Task queue depth is 5
2023-09-17 11:22:20 WARNING  Task queue depth is 6
2023-09-17 11:22:21 WARNING  Task queue depth is 7
2023-09-17 11:22:22 WARNING  Task queue depth is 8
2023-09-17 11:22:22 WARNING  Task queue depth is 9
2023-09-17 11:22:23 WARNING  Task queue depth is 10
2023-09-17 11:22:24 WARNING  Task queue depth is 11

Screenshots

No response

[ilike2burnthing]

Looks like someone is fucking with you. Do you have FlareSolverr exposed to the internet, i.e. portforwarded or not behind a firewall?

[Woody-Stock]

OK I just deactivated the port forwarding rule and it stopped. Thank you very much for that.
Does it mean I can't expose FlareSolverr to WAN?

[Gylesie]

You should not expose anything without needed security measures in place.

[Woody-Stock]

Very wise answer, anyway thank you very much, I might have to take a few steps now, but at least I know what caused it.

Any input on what that "person" was attempting to do?

[Gylesie]

I am not a cybersecurity expert, but to me, it looks like it could very well be some kind of DDoS attempt, possibly with more unsecured Flaresolverr instances.

[Woody-Stock]

Anyway thank you all for your help and for the quick answer.

As far as I am concerned this can be marked as "Resolved".