Network Fields

Match requests at the network layer by source IP, CIDR range, named IP list, ASN, or country.

Fields

Field	Key	Type	Example
IP Address	ip.src	IPv4 / IPv6	203.0.113.42
IP Range (CIDR)	ip.prefix	comma-separated CIDRs	10.0.0.0/8
IP List	ip.list	list name	my-blocked-ips
ASN Number	ip.asnum	integer	15169
Country	ip.country	ISO 3166-1 alpha-2	TR

Tip

ip.list only works with the in and not_in operators. Manage IP lists under Console → WAF → IP Lists.

Examples

# Block a specific country
IF   ip.country == RU
THEN block

# Allow your office IP range
IF   ip.prefix in 192.168.0.0/16
THEN allow