Webhooks not working, Cloudflare bot verification required

[Hari-Bonda]

Hello team, we are using CF bot protection and razorpay user agents are getting blocked at CF we request you to fill this form and communicate with them to whitelist reazorpy bots and IPs at CloudFlare. Please consider this request since CF is the only free provider to speed up our websites we heavily use them for all of our clients.

https://docs.google.com/forms/d/e/1FAIpQLSdqYNuULEypMnp4i5pROSc-uP6x65Xub9svD27mb8JChA_-XA/viewform

https://community.cloudflare.com/t/whitelist-razorpay-payment-gateway-bots/391186

Dear Team, I am a merchant and we perform transactions on our website, our payment gateway provider is Razorpay and we use WordPress Woo-commerce to take orders. During the transaction, Razorpay tries to access webhooks to change the order status. Due to some reason, bot fight is blocking these requests https://i.imgur.com/UzCT2lt.png

We have opened a support ticket with Razorpay and they asked us to whitelist a few IPs which are mentioned here https://razorpay.com/docs/whitelists/#webhook-ips

We urge you to whitelist Razorpay’s IPs and user agents from CF bot protection.

Since I do not find the contact details of their IT team I am not sure they will be able to work with you closely on this. If you need any other information let us know we will ask them via support ticket and forward the necessary info like ASN details …etc

As we noticed they are using only one ASN which is AS16509 AMAZON-02

if the CF team want to contact Razorpay directly you can contact them by raising a support ticket Track Payments, File Grievance - Razorpay Support

we have also submitted this request using Cloudflare bot verification google sheet Cloudflare Bot Verification

{
“action”: “jschallenge”,
“clientASNDescription”: “AMAZON-02”,
“clientAsn”: “16509”,
“clientCountryName”: “IN”,
“clientIP”: “52.66.76.63”,
“clientRequestHTTPHost”: “www.mydomain.com”,
“clientRequestHTTPMethodName”: “POST”,
“clientRequestHTTPProtocol”: “HTTP/1.1”,
“clientRequestPath”: “/consult/wp-admin/admin-post.php”,
“clientRequestQuery”: “?action=rzp_wc_webhook”,
“datetime”: “2022-06-14T05:12:31Z”,
“rayName”: “71b0924ea8fd4d63”,
“ruleId”: “bot_fight_mode”,
“rulesetId”: “”,
“source”: “botFight”,
“userAgent”: “Razorpay-Webhook/v1”,
“matchIndex”: 0,
“metadata”: ,
“sampleInterval”: 1
}

52.66.75.174
52.66.76.63
52.66.151.218
35.154.217.40
35.154.22.73
35.154.143.15
13.126.199.247
13.126.238.192
13.232.194.134

52.66.140.48
52.66.140.61
13.235.207.57
13.232.63.19
13.234.135.6
13.234.83.3
13.235.208.84
13.235.96.132
15.206.46.184

[Hari-Bonda]

//update

Ticket ID #7013882

we have received an email from Cloudflare that they are willing to whitelist the IPs of the Razorpay gateway!

All they want is to get the IPs listed in csv, json or plain txt format:

Please refer to this doc https://developers.cloudflare.com/bots/reference/verified-bots-policy#public-ip-list

---

If possible we'd love to get the IPs listed in csv, json or plain txt format:

https://developers.cloudflare.com/bots/reference/verified-bots-policy#public-ip-list

Thanks for working with us here.