Troubleshooting setup issues
Is Cloudflare attacking me?
There are two common scenarios where Cloudflare is falsely perceived to attack your site:
- Unless you , Cloudflare IP addresses appear in your server logs for all proxied requests.
- The attacker is spoofing Cloudflare’s IPs. Cloudflare only unless you use .
Ideally, because Cloudflare is a reverse proxy, your hosting provider observes attack traffic connecting from . In contrast, if you notice connections from IP addresses that do not belong to Cloudflare, the attack is direct to your origin web server. Cloudflare cannot stop attacks directly to your origin IP address because the traffic bypasses Cloudflare’s network.