Docs

Bulk IP Allowlisting and Blocklisting

Overview

If you need to add a large number of IP addresses or CIDR ranges to your allowlist or blocklist, there are two approaches depending on the size of your list.

Small Lists (Up to ~50 IPs)

Dashboard

Add IPs one at a time from the Block/Allow IPs page in your WAF dashboard. This is the simplest approach for small lists.

API

Use the Allowlist IP or Blocklist IP API endpoints to add IPs programmatically. Send one request per IP address.

Important: The API is designed for serial usage. Send requests one at a time, not in parallel. Wait for each response before sending the next request.

Example script to blocklist a list of IPs:

```bash #!/bin/bash API_KEY=”your-api-key”

while IFS= read -r ip; do curl -s -d “api_key=$API_KEY&ip=$ip” \ https://api.expeditedsecurity.com/api/blocklist_ip echo “” done < ip_list.txt ```

Where ip_list.txt contains one IP or CIDR range per line:

203.0.113.0/24 198.51.100.42 192.0.2.0/16

The same approach works for allowlisting — replace blocklist_ip with allowlist_ip.

Large Lists (More Than ~50 IPs)

For large lists, send your IP list to support@expeditedsecurity.com and we will import it for you. This is faster and avoids API rate limits.

When sending your list:

  • Include one IP or CIDR range per line
  • Specify whether these should be allowlisted or blocklisted
  • Use a .txt or .csv file attachment

Both individual IPs and CIDR ranges are supported in any size:

10.0.0.0/8 172.16.0.0/12 192.168.1.0/24 203.0.113.42

CIDR Range Support

Both the dashboard and API support CIDR notation for IP ranges:

CIDR Range Size Example
/32 1 IP 203.0.113.42/32 (same as 203.0.113.42)
/24 256 IPs 203.0.113.0/24
/16 65,536 IPs 203.0.0.0/16
/8 16,777,216 IPs 203.0.0.0/8

Using CIDR ranges is more efficient than listing individual IPs when you need to block or allow a contiguous range.

Viewing Your Current Lists

Dashboard

Your current allowlist and blocklist are visible on the Block/Allow IPs page.

API

Retrieve your current lists with:

```bash # Allowlist curl “https://api.expeditedsecurity.com/api/allowlist_ips/?api_key=YOUR-API-KEY”

Blocklist

curl “https://api.expeditedsecurity.com/api/blocklist_ips/?api_key=YOUR-API-KEY” ```

Both return a JSON array of IP addresses and CIDR ranges.

Need Help?

If you need help with a bulk import or have questions about IP management: