Block addresses in Cloudflare

Add the address behind an alert to a Cloudflare IP list for a while, then remove it again.

Last reviewed November 11, 2026

A response can add the address from an incoming alert to a Cloudflare IP list that you created, and remove it again when the time is up. You point your own Cloudflare rule at that list, so you decide what "blocked" means.

Set up Cloudflare

  1. In Cloudflare open Manage account, Configurations, Lists, and create an IP list, for example blocked-by-uptimewave. Note the list ID and your account ID.
  2. Create a WAF custom rule that blocks or challenges requests whose source address is in that list.
  3. Create an API token with only the permission Account: Account Rule Lists: Edit (older dashboards call it Account Filter Lists), limited to that account. Do not use a broader token or the Global API key.

Set up UptimeWave

  1. Open Connections, add a Cloudflare connection with the account ID and token, and add the list as a target. You can let us discover your lists instead of typing the ID.
  2. Press Test connection.
  3. Create a response with the action Add address to a Cloudflare list, choose the list, and choose how long to block: 15 minutes, 1 hour, 6 hours, 24 hours, 7 days, or until a person removes it.