Cloudflare Error

Hi All,
Can anyone help with the constant error I get when using Cloudflare, access does seem to work via the https://xxxx.net but I do get hundreds of the errors message below

Blockquote Login attempt or request with invalid authentication from asfd-05-b2-v4wan-16xxxx-cusxxxxx.vmxx.cable.virginm.net (xx.xx.xx.xx). Requested URL: ‘/api/websocket’. (Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/6.7.3 Chrome/118.0.5993.220 Safari/537.36)
Blockquote

I cant see any clues the log for Cloudflare


 Add-on: Cloudflared
 Use a Cloudflare Tunnel to remotely connect to Home Assistant without opening any ports
-----------------------------------------------------------
 Add-on version: 5.2.7
 You are running the latest version of this add-on.
 System: Home Assistant OS 14.1  (amd64 / qemux86-64)
 Home Assistant Core: 2025.1.3
 Home Assistant Supervisor: 2024.12.3
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums or the Discord chat.
-----------------------------------------------------------
[23:16:07] INFO: Checking add-on config...
[23:16:07] INFO: Checking for existing certificate...
[23:16:07] INFO: Existing certificate found
[23:16:07] INFO: Checking for existing tunnel...
[23:16:07] INFO: Existing tunnel with ID 00b219aa-35b8-41b1-b648-893089ee357e found
[23:16:07] INFO: Checking if existing tunnel matches name given in config
[23:16:08] INFO: Existing Cloudflare Tunnel name matches config, proceeding with existing tunnel file
[23:16:08] INFO: Creating config file...
[23:16:08] INFO: Validating config file...
Validating rules from /tmp/config.json
OK
[23:16:09] INFO: Creating DNS entry xxx.net...
2025-01-20T23:16:10Z INF xxxx.net is already configured to route to your tunnel tunnelID=00b219aa-35b8-41b1-b648-893089ee357e
[23:16:10] INFO: Finished setting up the Cloudflare Tunnel
[23:16:10] INFO: Connecting Cloudflare Tunnel...
2025-01-20T23:16:11Z INF Starting tunnel tunnelID=00b219aa-35b8-41b1-b648-893089ee357e
2025-01-20T23:16:11Z INF Version 2025.1.0 (Checksum 8734f79dbdcb91e305fa48d837840c8c0d14f143ed390c516b86c2c292d9b368)
2025-01-20T23:16:11Z INF GOOS: linux, GOVersion: go1.22.5, GoArch: amd64
2025-01-20T23:16:11Z INF Settings: map[config:/tmp/config.json cred-file:/data/tunnel.json credentials-file:/data/tunnel.json metrics:0.0.0.0:36500 no-autoupdate:true origincert:/data/cert.pem]
2025-01-20T23:16:11Z INF Generated Connector ID: cf924bd8-7b32-458f-b9c2-e8ceec9da914
2025-01-20T23:16:11Z INF Initial protocol quic
2025-01-20T23:16:11Z INF ICMP proxy will use 172.30.33.2 as source for IPv4
2025-01-20T23:16:11Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
2025-01-20T23:16:11Z INF ICMP proxy will use 172.30.33.2 as source for IPv4
2025-01-20T23:16:11Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
2025-01-20T23:16:11Z INF Starting metrics server on [::]:36500/metrics
2025-01-20T23:16:11Z INF Registered tunnel connection connIndex=0 connection=dec145bb-f317-428a-80b5-86a348577398 event=0 ip=198.41.200.193 location=lhr14 protocol=quic
2025-01-20T23:16:12Z INF Registered tunnel connection connIndex=1 connection=891bd84d-1eea-4d90-86b0-239c76d317a7 event=0 ip=198.41.192.107 location=lhr09 protocol=quic
2025-01-20T23:16:13Z INF Registered tunnel connection connIndex=2 connection=d084e482-b19c-4d17-801b-e3025af46d4a event=0 ip=198.41.192.167 location=lhr09 protocol=quic
2025-01-20T23:16:14Z INF Registered tunnel connection connIndex=3 connection=36906c34-3dce-4e3b-9c0a-a74297e9f9e2 event=0 ip=198.41.200.13 location=lhr01 protocol=quic

here is my config.yaml if that helps
homeassistant:
external_url: !secret base_url
internal_url: http://192.100.1.100:8123

Authentication providers for logging into the Home Assistant UI

auth_providers:
- type: homeassistant

Include configuration from the “packages” directory

packages: !include_dir_named packages

Frontend Configuration

frontend:

Theme configuration

themes: !include_dir_merge_named themes

Component Defaults

default_config:

HTTP Configuration

http:
use_x_forwarded_for: true
trusted_proxies:
- 172.30.33.0/24

Thanks for any advise… i have uninstalled and reinstalled loads of time to no avail so any help appreciated.
Darren

Add another layer, use nginx ssl proxy.

Cloudflare 443 > nginx ssl proxy 443 > ha core 8123.

All free certificates got spammed.

They are public. Ssl transparency…

Hi, thanks for the advise, I should have pointed out that the IP address that hitting my HA is my own ISP address and I cant figure out what’s doing it