---
title: "Why is a Cloudflare IP address classified as Anonymizing?"
type: "faq"
url: "https://docs.spur.us/knowledgebase/faqs/why-is-a-cloudflare-ip-classified-as-anonymizing"
category: "Anonymizing Infrastructure"
product: "context-api"
publishedAt: "2026-09-04T12:00:00.000Z"
updatedAt: "2026-09-04T15:25:04Z"
---

# Why is a Cloudflare IP address classified as Anonymizing?

Some IPs belonging to a CDN like Cloudflare are classified as Anonymizing because they're used as the TLS entry point for an anonymizing tunnel service. The connecting client's TLS handshake names a legitimate-looking hostname, and the CDN routes the traffic to unrelated tunnel infrastructure behind it — the named domain and the CDN provider itself aren't involved in or aware of the proxying. In Spur's data this is reflected in the `tunnels` field, which distinguishes an IP's role as a tunnel entrance from its role as an exit. If your use case depends specifically on identifying egress points, you can filter out entrance-only IPs, since these are rarely also used as an exit for other services.