Thanks for all the input.
As an update:
Information requested by Cloudflare has been submitted to them and they are investigating the problem. We suspect may be they have a misconfiguration in one of their servers that the traffic is going through
Last update from them was that they are still investigating
