Docs

Bulk IP Allowlisting and Blocklisting

Overview

If you need to add a large number of IP addresses or CIDR ranges to your allowlist or blocklist, there are two approaches depending on the size of your list.

Small Lists (Up to ~50 IPs)

Dashboard

Add IPs one at a time from the IP Rules > Block IPs or Allow IPs pages in your WAF dashboard. This is the simplest approach for small lists.

API

Use the Allowlist IP or Blocklist IP API endpoints to add IPs programmatically. Send one request per IP address.

Important: The API is designed for serial usage. Send requests one at a time, not in parallel. Wait for each response before sending the next request.

Example script to blocklist a list of IPs:

#!/bin/bash
API_KEY="your-api-key"

while IFS= read -r ip; do
  curl -s -d "api_key=$API_KEY&ip=$ip" \
    https://api.expeditedsecurity.com/api/blocklist_ip
  echo ""
done < ip_list.txt

Where ip_list.txt contains one IP or CIDR range per line:

203.0.113.0/24
198.51.100.42
192.0.2.0/16

The same approach works for allowlisting: replace blocklist_ip with allowlist_ip.

Large Lists (More Than ~50 IPs)

For large lists, send your IP list to support@expeditedsecurity.com and we will import it for you. This is faster than working through the API, which is designed for sequential requests so that each response is easy to attribute to its IP.

When sending your list:

  • Include one IP or CIDR range per line
  • Specify whether these should be allowlisted or blocklisted
  • Use a .txt or .csv file attachment

Both individual IPs and CIDR ranges (/16 and /24) are supported:

203.0.0.0/16
192.168.1.0/24
203.0.113.42

CIDR Range Support

Both the dashboard and API support /16 and /24 CIDR ranges. A single IP address needs no suffix.

CIDR Range Size Example
/24 256 IPs 203.0.113.0/24
/16 65,536 IPs 203.0.0.0/16

Using CIDR ranges is more efficient than listing individual IPs when you need to block or allow a contiguous range.

Viewing Your Current Lists

Dashboard

Your current allowlist and blocklist are visible on the IP Rules > Allow IPs and Block IPs pages.

API

Retrieve your current lists with:

# Allowlist
curl "https://api.expeditedsecurity.com/api/allowlist_ips/?api_key=YOUR-API-KEY"

# Blocklist
curl "https://api.expeditedsecurity.com/api/blocklist_ips/?api_key=YOUR-API-KEY"

Both return a JSON array of IP addresses and CIDR ranges.

Need Help?

If you need help with a bulk import or have questions about IP management: