Block an IP at the packet level

POST

/ipaware/firewall/block

Last modified:2026-07-18 16:57:06

OperationId:blockIp

Adds the IP to the ipset block list (journaled, TTL-bounded). Requires firewall_enable=yes (400 otherwise). Allow-listed and never-block IPs are refused with a skipped status. The IP may come from the JSON body or ?ip=.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Query Params

Body Params application/json

Examples

Responses

🟢200OK

application/json

Block result.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠429

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/ipaware/firewall/block?ip=undefined&reason=undefined' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "ip": "203.0.113.9",
    "reason": "fraud investigation",
    "ttl": 86400
}'

Response Example

200 - Example 1

{
    "ip": "string",
    "status": "string",
    "cachePurged": true,
    "historyForgotten": true,
    "property1": "string",
    "property2": "string"
}

Modified at 2026-07-18 16:57:06

Per-IP kernel drop counters

Remove a packet-level block