Managed Lists

Cloudflare provides Managed Lists you can use in rule expressions. These lists are regularly updated.

Note

The available Managed Lists depend on your Cloudflare plan and product subscriptions. Refer to Availability for details.

Managed IP Lists

Use Managed IP Lists to access Cloudflare's IP threat intelligence.

Cloudflare provides the following Managed IP Lists:

Display name	Name in expressions	Description
Cloudflare Open Proxies	cf.open_proxies	IP addresses of known open HTTP and SOCKS proxy endpoints, which are frequently used to launch attacks and hide attackers identity.
Cloudflare Anonymizers	cf.anonymizer	IP addresses of known anonymizers (Open SOCKS Proxies, VPNs, and TOR nodes).
Cloudflare VPNs	cf.vpn	IP addresses of known VPN servers.
Cloudflare Malware	cf.malware	IP addresses of known sources of malware.
Cloudflare Botnets, Command and Control Servers	cf.botnetcc	IP addresses of known botnet command-and-control servers.