Read firewall blocks

GET

/ipaware/{hostname}/firewall

Last modified:2026-10-09 01:00:27

OperationId:getFirewall

Reads the firewall status on one server and every address it is blocking, with why and until when. Requires Super User or Admin Super User scope.

A server without a firewall answers status {"enabled": false} and no blocks. For drop counters per address, use GET /ipaware/{hostname}/firewall/stats.

The request goes to the IP rules service on {hostname}, and its status and body come back unchanged. Errors the API decides itself use the code and message form; errors from the service use the error form.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200OK

application/json

Firewall status and active blocks on this server.

Bodyapplication/json

🟠401Unauthorized

🟠403Forbidden

🟠429Too Many Requests

🟠404Not Found

🔴503Service Unavailable

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/ipaware//firewall' \
--header 'Authorization: Bearer <token>'

Response Example

200 - One block

{
    "status": {
        "enabled": true,
        "manualEnabled": true,
        "mode": "yes",
        "customBlockSources": [],
        "active": true,
        "ready": true,
        "backend": "ipset"
    },
    "blocks": [
        {
            "ip": "203.0.113.9",
            "reason": "Fraud investigation",
            "score": null,
            "type": null,
            "addedAt": "2026-09-01T14:30:00.000Z",
            "expiresAt": "2026-09-02T14:30:00.000Z",
            "origin": "manual"
        }
    ]
}

Modified at 2026-10-09 01:00:27

Read core scanner status

Read firewall counters