WAF - Use Cloudforce One threat intelligence in WAF rules (opens in new tab)
You can now match incoming requests against Cloudforce One threat intelligence in your WAF rules. A new detection looks up the client IP address of each request against the threat intelligence database. If the IP was involved in threat activity in the past seven days, Cloudflare populates cf.intel.ip.* fields that you can use in and . The detection populates the following fields. Use the [*] wildcard to match array values: cf.intel.ip.datasets — the dataset that flagged the IP address (ddos o...
Read the original article