recent marks addresses with drops in the last recentWindowSec seconds. A server whose firewall is not running answers 400.{hostname}, and its status and body come back unchanged. Errors the API decides itself use the code and message form; errors from the service use the error form.Authorization: Bearer ********************curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/ipaware//firewall/stats' \
--header 'Authorization: Bearer <token>'{
"entries": [
{
"ip": "203.0.113.9",
"packets": 412,
"bytes": 24720,
"reason": "Fraud investigation",
"score": null,
"type": null,
"addedAt": "2026-09-01T14:30:00.000Z",
"recent": true
}
],
"totalPackets": 412,
"totalBytes": 24720,
"recentWindowSec": 300,
"recentAsOf": "2026-09-01T14:35:00.000Z"
}