Cloudflare IP Tools
Is an IP address or website behind Cloudflare? Plus Cloudflare's current IP ranges, ready to paste into your server config.
Try:
Ranges come from cloudflare.com/ips (refreshed daily). Domain checks resolve the domain and, when proxied, ask Cloudflare's /cdn-cgi/trace which data centre answered. Limited to 30 checks per 10 minutes.
Cloudflare IP ranges
Loading…
About this tool
Why allow only Cloudflare's IPs?
If your site is behind Cloudflare, attackers can bypass it by connecting to your server's real IP. Allowing web traffic only from Cloudflare's ranges (the ufw/iptables configs above) closes that gap.
Getting real visitor IPs
Behind Cloudflare, your server sees Cloudflare's addresses. The nginx and Apache configs restore the visitor's real IP from the CF-Connecting-IP header, but only for requests that really come from Cloudflare.
Data centre codes
Cloudflare names data centres after the nearest airport code, for example YYZ (Toronto), IAD (Washington) or FRA (Frankfurt).