Deny all except some IPs

Go to your domain on Cloudflare.

Choose the Security menu, and go to WAF.

Then, Create firewall rule type the Rule name.

Fill in the rule with this.

• Field: IP Source Address
• Operator: is not in
• Value: 103.103.103.103, 104.104.104.104 (your allowed IP)
• Choose an action (Required): Block

Finally, try to access your domain from IP that is unlisted.