ip.src — IP Address
IPv4 / IPv6
In the console: IP Address
Source IP address of the incoming request. Supports IPv4 and IPv6; accepts plain IPs only (use ip.prefix for CIDR). To reference a named IP list defined in the Console, use the ip.list field.
Supported Operators
Section titled “Supported Operators”| Operator | Description |
|---|---|
== | Exact match |
!= | Not equal |
in | In list |
not_in | Not in list |
Examples
Section titled “Examples”IF ip.src == 203.0.113.42THEN blockIF ip.prefix == 10.0.0.0/8THEN allowIF ip.src in 203.0.113.42, 198.51.100.7THEN block