I'm really needing your help with my faucet.

2 of the most important rotators are receiving an error when try to claim on my faucet.

"API error: ACL is active and server IP address is not authorized"

My ACL was enabled with only one IP (that is the IP of my hosting provider) but with this configuration they can't claim on my faucet.

One IP from CloudFlare is always trying to connect to my API, but I'm not using CloudFlare service. If I enter the CloudFlare IP, how can I know if is someone trying to steal my BTC through CloudFlare infrastructure or a real API call?