Deny all except some IPs
Go to your domain on Cloudflare.
Choose the Security menu, and go to WAF.
Create firewall rule type Rule name.
Fill the rule with this.
- Field: IP Source Address
- Operator: is not in
- Value: 184.108.40.206, 220.127.116.11 (your allowed IP)
- Choose an action (Required): Block
Finally, try to access your domain from IP that is unlisted.