We’ve just moved a website onto Cloudflare’s CDN on Monday this week, but our payment provider has gone from flagging 2/3 suspected spam payments a week to upwards of 40 in one day. This is due to traffic getting routed through the same Cloudflare IP addresses. Is there any way to completely remove the payment area (which sits on the same domain as our main website) from Cloudflare’s CDN so that this stops happening?
As @KianNH says, you can’t do anything simple at Cloudflare but there are other solns such as having you backend using X-Forwarded-For (or True-Client-IP if on your plan) instead of the Cloudflare proxy IPs you currently see.
Here’s a nice summary of how to restore ‘real’ visitor IPs when using Cloudflare: