Unfortunately I have not found any crowd scenerios or parsers to do this. I decided to go nuclear and block all cloudflare ip ranges https://www.cloudflare.com/ips-v4 https://www.cloudflare.com/ips-v6 From cloudflare's docs they don't change Ip ranges very often, so I set my duration to 365 days....