List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.
GET
/
api
/
v1
/
cloud-defender
/
{id}
/
ip-rules
List a Cloud Defender domain's blocked and always-allowed addresses
curl --request GET \ --url https://app.aegister.com/api/v1/cloud-defender/{id}/ip-rules \ --header 'X-Aegister-Token: <api-key>'
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Aegister S.p.A.","colors":{"primary":"#1f4e79","light":"#33e0ff","dark":"#1f4e79"},"logo":{"light":"https://mintcdn.com/aegisterspa-1426e47d/aOgMPFGVmmaPqUWw/logo/light.png?fit=max\u0026auto=format\u0026n=aOgMPFGVmmaPqUWw\u0026q=85\u0026s=4043c9d3c13ce4bb256425ea6b2a1f7a","dark":"https://mintcdn.com/aegisterspa-1426e47d/aOgMPFGVmmaPqUWw/logo/dark.png?fit=max\u0026auto=format\u0026n=aOgMPFGVmmaPqUWw\u0026q=85\u0026s=b86ad17334c1c14fdbcd7eff32df54e5"},"favicon":"https://mintcdn.com/aegisterspa-1426e47d/aOgMPFGVmmaPqUWw/favicon.png?fit=max\u0026auto=format\u0026n=aOgMPFGVmmaPqUWw\u0026q=85\u0026s=b0a7130155f75c49e54a47e307dc366e","api":{"openapi":"https://app.aegister.com/api/v1/schema/","mdx":{"server":"https://app.aegister.com"}},"navbar":{"links":[{"href":"mailto:info@aegister.com","label":"Support"}],"primary":{"type":"button","label":"Dashboard","href":"https://app.aegister.com/"}},"footer":{"socials":{"linkedin":"https://www.linkedin.com/company/aegister-s-p-a","website":"https://www.aegister.com/"}},"integrations":{"ga4":{"measurementId":"G-65HW0KZ4C7"}},"styling":{"latex":false},"navigation":{"languages":[{"language":"it","href":"documentation/it/introduzione"},{"language":"en","href":"documentation/en/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"aegisterspa-1426e47d","hasAudioNarration":false,"actualSubdomain":"aegisterspa-1426e47d","customDomains":["docs.aegister.com"],"gitSource":{"type":"github","owner":"nm-aegister","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae303d6fcaf041a9b4b2aa8","collectionId":"d3334bea-506b-4cbf-8b8b-17176ca5a873","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae303d6fcaf041a9b4b2aa8"},"entitlements":{},"buildId":"6ae303d6fcaf041a9b4b2aa8","clientVersion":"0.0.4006","searchFilterCounts":[{"language":"en","tag":"API Reference","count":131},{"language":"it","tag":"API","count":131},{"language":"en","tag":"Perimeter Protection","count":53},{"language":"it","tag":"Protezione perimetrale","count":53},{"language":"it","tag":"Virtual CISO","count":46},{"language":"en","tag":"V-CISO","count":43},{"language":"en","tag":"Cloud Defender","count":36},{"language":"it","tag":"Cloud Defender","count":36},{"language":"en","tag":"Cyber Posture","count":23},{"language":"it","tag":"Cyber Posture","count":23},{"language":"en","tag":"Documentation","count":22},{"language":"it","tag":"Documentazione","count":22},{"language":"en","tag":"Threat Blocker","count":16},{"language":"en","tag":"Incident Notification","count":16},{"language":"it","tag":"Threat Blocker","count":16},{"language":"it","tag":"Notifica incidenti","count":16},{"language":"en","tag":"Protection lists","count":13},{"language":"it","tag":"Elenchi di protezione","count":13},{"language":"en","tag":"Organizations","count":11},{"language":"it","tag":"Organizzazioni","count":11}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/cloud-defender/list-cloud-defender-ip-rules","slug":"/api-reference/cloud-defender/list-cloud-defender-ip-rules","pageMetadata":{"title":"List Cloud Defender banned and allowed addresses","sidebarTitle":"List banned and allowed IPs","description":"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.","openapi":"get /api/v1/cloud-defender/{id}/ip-rules","href":"/api-reference/cloud-defender/list-cloud-defender-ip-rules"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"List Cloud Defender banned and allowed addresses","sidebarTitle":"List banned and allowed IPs","description":"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.","openapi":"get /api/v1/cloud-defender/{id}/ip-rules","href":"/api-reference/cloud-defender/list-cloud-defender-ip-rules"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"cloud_defender_ip_rules_retrieve","description":"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.","summary":"List a Cloud Defender domain's blocked and always-allowed addresses","parameters":["87010e4f-47a0-43f7-a489-1846d81b6016"],"tags":["cloud-defender"],"security":["5a8003b9-39b6-40c6-9bbd-3a82c2eff66c"],"responses":{"200":"a201ab95-b565-40fe-ab77-8aea733826f8","404":"69a01d0b-c661-4cf5-b456-d84da0d453e6"},"method":"get","type":"path","servers":[],"path":"/api/v1/cloud-defender/{id}/ip-rules","baseUrlOptions":["https://app.aegister.com"],"title":"List a Cloud Defender domain's blocked and always-allowed addresses","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"87010e4f-47a0-43f7-a489-1846d81b6016":{"in":"path","name":"id","schema":{"type":"integer","isRequired":true,"uniqueKey":"","typeLabel":"integer"},"required":true}},"responses":{"a201ab95-b565-40fe-ab77-8aea733826f8":{"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"integer","description":"Any value different from 0 indicates an error. \nMore details can be found in `messages`.","minimum":0,"maximum":0,"examples":[0],"uniqueKey":"error","typeLabel":"integer"},"messages":{"type":"array","description":"If `error` is `1`, contains zero or more details on the error.","examples":[[]],"uniqueKey":"messages","typeLabel":"array"},"total":{"type":"number","description":"Total number of items that meet the list filter. \nThis doesn't represent the number of items inside the `data` array.","minimum":0,"examples":[20,30,40],"uniqueKey":"total","typeLabel":"number"},"data":{"type":"array","items":{"type":"object","properties":{"id":{"type":"integer","uniqueKey":"data.items.[INDEX].id","typeLabel":"integer"},"net":{"type":"string","description":"One address, a v4 /24 or a v6 /64.","uniqueKey":"data.items.[INDEX].net","typeLabel":"string"},"action":{"type":"string","enum":["block","allow"],"description":"`block`: banned on this domain. `allow`: on its whitelist.","uniqueKey":"data.items.[INDEX].action","typeLabel":"enum\u003cstring>"},"source":{"type":"string","enum":["manual","auto_ban"],"description":"`manual`: added by a person (this API, the console's Protection tab or a Ban button). `auto_ban`: banned automatically by Cloud Defender for 24 hours, after a burst of requests it blocked as attacks on this domain.","uniqueKey":"data.items.[INDEX].source","typeLabel":"enum\u003cstring>"},"reason":{"type":"string","uniqueKey":"data.items.[INDEX].reason","typeLabel":"string"},"expires_at":{"oneOf":[{"type":"string","format":"date-time","description":"When a ban ends. Null = until removed.","uniqueKey":"data.items.[INDEX].expires_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","description":"When a ban ends. Null = until removed.","uniqueKey":"data.items.[INDEX].expires_at.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].expires_at","typeLabel":"string\u003cdate-time> | null"},"created_at":{"type":"string","format":"date-time","uniqueKey":"data.items.[INDEX].created_at","typeLabel":"string\u003cdate-time>"},"created_by":{"oneOf":[{"type":"string","description":"The user who added it.","uniqueKey":"data.items.[INDEX].created_by.oneOf.0","typeLabel":"string"},{"type":"null","description":"The user who added it.","uniqueKey":"data.items.[INDEX].created_by.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].created_by","typeLabel":"string | null"},"event_id":{"oneOf":[{"type":"integer","description":"The detection a ban came from, while it still exists.","uniqueKey":"data.items.[INDEX].event_id.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The detection a ban came from, while it still exists.","uniqueKey":"data.items.[INDEX].event_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.items.[INDEX].event_id","typeLabel":"integer | null"}},"uniqueKey":"data.items.[INDEX]","typeLabel":"object"},"uniqueKey":"data","typeLabel":"object[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"BannedAndWhitelistedAddresses":{"title":"BannedAndWhitelistedAddresses","value":{"error":0,"messages":[],"data":[{"id":41,"net":"203.0.113.7","action":"block","source":"manual","reason":"Scanning our login page","expires_at":"2026-11-27T09:30:00Z","created_at":"2026-10-28T09:30:00Z","created_by":"00000000-0000-4000-8000-000000000000","event_id":1520},{"id":40,"net":"198.51.100.0/24","action":"block","source":"auto_ban","reason":"","expires_at":"2026-10-29T08:12:00Z","created_at":"2026-10-28T08:12:00Z","created_by":"00000000-0000-4000-8000-000000000000","event_id":1517},{"id":12,"net":"2001:db8:10::/64","action":"allow","source":"manual","reason":"Office","expires_at":null,"created_at":"2026-10-01T10:00:00Z","created_by":"00000000-0000-4000-8000-000000000000","event_id":null}],"total":3}}},"exampleType":"examples"}},"description":"","exampleType":"examples"},"69a01d0b-c661-4cf5-b456-d84da0d453e6":{"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"integer","description":"Any value different from 0 indicates an error. \nMore details can be found in `messages`.","minimum":0,"maximum":0,"examples":[1],"uniqueKey":"error","typeLabel":"integer"},"messages":{"type":"array","description":"If `error` is `1`, contains zero or more details on the error.","examples":[[]],"uniqueKey":"messages","typeLabel":"array"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":1,"messages":[]}}},"exampleType":"generated"}},"description":"","exampleType":"generated"}},"security":{"5a8003b9-39b6-40c6-9bbd-3a82c2eff66c":{"ApiKeyAuth":{"type":"apiKey","in":"header","name":"X-Aegister-Token","scopes":[],"schemeName":"ApiKeyAuth"}}},"servers":{},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"apiKey","in":"header","name":"X-Aegister-Token","scopes":[],"schemeName":"ApiKeyAuth"},"schema":{"title":"X-Aegister-Token","type":"string","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"ApiKeyAuth","name":"X-Aegister-Token"}],"title":"ApiKeyAuth"}]},"originalFileLocation":"https://app.aegister.com/api/v1/schema/"},"subdomain":"aegisterspa-1426e47d","siteName":"Aegister S.p.A.","title":"List Cloud Defender banned and allowed addresses - Aegister S.p.A.","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"it":{"href":"/api-reference/it/cloud-defender/list-cloud-defender-ip-rules","matchLevel":1},"en":{"href":"/api-reference/cloud-defender/list-cloud-defender-ip-rules","matchLevel":0}}},"lastModified":"2026-10-29T08:29:22.583Z","originalFileLocation":"api-reference/cloud-defender/list-cloud-defender-ip-rules.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Aegister S.p.A.\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"List Cloud Defender banned and allowed addresses - Aegister S.p.A.\">\u003cmeta data-mint-head property=\"og:description\" content=\"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Aegister S.p.A.\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://aegisterspa-1426e47d.mintlify.app/_mintlify/api/og/v2?division=Protection+lists\u0026amp;title=List+Cloud+Defender+banned+and+allowed+addresses\u0026amp;description=List+the+addresses+blocked+on+a+protected+domain+%28Banned+IP+addresses+on+the+Protection+tab%29+and+the+ones+always+allowed+%28Whitelist%29%2C+newest+first.+Expired+bans\u0026amp;theme=b093f89ef95eb1fa2406eba8\u0026amp;signature=4311251914ed9098ff83d3cdfd6be4890fb19649b59e999465d40f0b9ac4ff07\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"List Cloud Defender banned and allowed addresses - Aegister S.p.A.\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://aegisterspa-1426e47d.mintlify.app/_mintlify/api/og/v2?division=Protection+lists\u0026amp;title=List+Cloud+Defender+banned+and+allowed+addresses\u0026amp;description=List+the+addresses+blocked+on+a+protected+domain+%28Banned+IP+addresses+on+the+Protection+tab%29+and+the+ones+always+allowed+%28Whitelist%29%2C+newest+first.+Expired+bans\u0026amp;theme=b093f89ef95eb1fa2406eba8\u0026amp;signature=4311251914ed9098ff83d3cdfd6be4890fb19649b59e999465d40f0b9ac4ff07\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/aegisterspa-1426e47d/jHOZD10MDil8yiWK/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Aegister S.p.A.\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#1f4e79\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/cloud-defender/list-cloud-defender-ip-rules.md\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"en\" href=\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"it\" href=\"https://docs.aegister.com/api-reference/it/cloud-defender/list-cloud-defender-ip-rules\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"x-default\" href=\"https://docs.aegister.com/api-reference/it/cloud-defender/list-cloud-defender-ip-rules\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.aegister.com/#organization\",\"name\":\"Aegister S.p.A.\",\"url\":\"https://docs.aegister.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/aegisterspa-1426e47d/aOgMPFGVmmaPqUWw/logo/light.png?fit=max\u0026auto=format\u0026n=aOgMPFGVmmaPqUWw\u0026q=85\u0026s=4043c9d3c13ce4bb256425ea6b2a1f7a\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.aegister.com#website\",\"name\":\"Aegister S.p.A.\",\"url\":\"https://docs.aegister.com\",\"publisher\":{\"@id\":\"https://docs.aegister.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules#webpage\",\"url\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\",\"name\":\"List Cloud Defender banned and allowed addresses\",\"description\":\"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\",\"dateModified\":\"2026-10-29T08:29:22.583Z\",\"isPartOf\":{\"@id\":\"https://docs.aegister.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Perimeter Protection\",\"item\":\"https://docs.aegister.com/api-reference/atb/list-threat-blocker-configurations\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloud Defender\",\"item\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-configurations\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"List Cloud Defender banned and allowed addresses\",\"item\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules#apireference\",\"headline\":\"List Cloud Defender banned and allowed addresses\",\"name\":\"List Cloud Defender banned and allowed addresses\",\"description\":\"List the addresses blocked on a protected domain (Banned IP addresses on the Protection tab) and the ones always allowed (Whitelist), newest first. Expired bans are left out. Automatic bans, which Cloud Defender adds for sources that keep requesting attack URLs, appear here too. Every role that can see the domain can read the list.\",\"url\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules\",\"mainEntityOfPage\":{\"@id\":\"https://docs.aegister.com/api-reference/cloud-defender/list-cloud-defender-ip-rules#webpage\"},\"dateModified\":\"2026-10-29T08:29:22.583Z\",\"publisher\":{\"@id\":\"https://docs.aegister.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.aegister.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Aegister S.p.A.\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Aegister S.p.A.","nav":{"global":null,"languages":[{"language":"it","pages":[{"title":"it","href":"/api-reference/it/cloud-defender/list-cloud-defender-ip-rules"}]},{"language":"en","tabs":[{"tab":"Documentation","pages":[{"title":"Documentation","href":"/documentation/en/introduction"}]},{"tab":"API Reference","groups":[{"group":"API Documentation","pages":[{"title":"Token","href":"/api-reference/token"},{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"V-CISO","pages":[{"group":"Cyber Posture","pages":[{"group":"Workflows","pages":[{"title":"List workflow associations","sidebarTitle":"List associations","openapi":"get /api/v1/v-ciso/workflows","href":"/api-reference/v-ciso/list-workflow-associations"},{"title":"Get organization workflow associations","sidebarTitle":"Org associations","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows","href":"/api-reference/v-ciso/get-organization-workflow-associations"},{"title":"List available workflows","sidebarTitle":"Available workflows","openapi":"get /api/v1/v-ciso/available-workflows","href":"/api-reference/v-ciso-•-workflows/list-available-workflows"},{"title":"Associate workflow to organization","sidebarTitle":"Associate workflow","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}","href":"/api-reference/cyber-assurance-•-workflows/associate-workflow-to-organization"},{"title":"Disassociate workflow from organization","sidebarTitle":"Disassociate workflow","openapi":"delete /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}","href":"/api-reference/cyber-assurance-•-workflows/disassociate-workflow-from-organization"}]},{"group":"Framework Controls","pages":[{"title":"Framework controls spec","sidebarTitle":"Framework spec","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/framework/spec","href":"/api-reference/v-ciso-•-workflows/framework-spec"},{"title":"Current answers for a framework's controls","sidebarTitle":"Framework answers","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/framework/answers","href":"/api-reference/v-ciso-•-workflows/framework-answers"},{"title":"Submit a framework step's control answers","sidebarTitle":"Controls import","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/framework/controls-import","href":"/api-reference/v-ciso-•-workflows/framework-controls-import"}]},{"group":"Tasks","pages":[{"title":"Guide: the spec-driven V-CISO API","href":"/api-reference/v-ciso-•-workflows/bulk-update-a-table-task"},{"title":"List the organization's tasks","sidebarTitle":"List tasks","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/tasks","href":"/api-reference/v-ciso-•-workflows/tasks-list"},{"title":"List the organization's table tasks","sidebarTitle":"List table tasks","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/table-tasks","href":"/api-reference/v-ciso-•-workflows/table-tasks-list"},{"title":"Table task column spec","sidebarTitle":"Table spec","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/spec","href":"/api-reference/v-ciso-•-workflows/table-task-spec"},{"title":"Current answers for a question task","sidebarTitle":"Task answers","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/answers","href":"/api-reference/v-ciso-•-workflows/task-answers"},{"title":"Fill a V-CISO task from your documents with AI","sidebarTitle":"Fill from documents","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/prefill","href":"/api-reference/v-ciso-•-workflows/task-prefill-start"},{"title":"Get the AI fill proposal for a V-CISO task","sidebarTitle":"Get the AI proposal","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/prefill/{job}","href":"/api-reference/v-ciso-•-workflows/task-prefill-result"},{"title":"Import into a task","sidebarTitle":"Import task","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/import","href":"/api-reference/v-ciso-•-workflows/table-task-import"},{"title":"Download a table task XLSX template","sidebarTitle":"Table template","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/template","href":"/api-reference/v-ciso-•-workflows/table-task-template"},{"title":"Export a table task to XLSX","sidebarTitle":"Export table","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/tasks/{taskid}/export","href":"/api-reference/v-ciso-•-workflows/table-task-export"}]},{"group":"Documents","pages":[{"title":"List a workflow's documents","sidebarTitle":"List documents","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/documents","href":"/api-reference/v-ciso-•-workflows/workflow-documents"},{"title":"List document versions for an artifact","sidebarTitle":"List versions","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/documents/{artifactid}/versions","href":"/api-reference/cyber-assurance-•-documents/list-document-versions-for-an-artifact"},{"title":"Upload a new document version","sidebarTitle":"Upload version","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/documents/{artifactid}/versions","href":"/api-reference/cyber-assurance-•-documents/upload-a-new-document-version"},{"title":"Download a document version","sidebarTitle":"Download a document version","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/documents/{artifactid}/versions/{versionid}/download","href":"/api-reference/cyber-assurance-•-documents/download-a-document-version"},{"title":"Get workflow report","sidebarTitle":"Workflow report","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/report","href":"/api-reference/v-ciso-•-workflows/get-workflow-report"}]}]},{"group":"Evaluations","pages":[{"title":"Submit a workflow evaluation","sidebarTitle":"Submit evaluation","openapi":"post /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/evaluate","href":"/api-reference/v-ciso-•-workflows/submit-workflow-evaluation"},{"title":"List workflow evaluations","sidebarTitle":"List evaluations","openapi":"get /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/evaluations","href":"/api-reference/v-ciso/list-workflow-evaluations"},{"title":"Update workflow evaluation","sidebarTitle":"Update evaluation","openapi":"patch /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/evaluations","href":"/api-reference/v-ciso/update-workflow-evaluation"},{"title":"Delete workflow evaluations","sidebarTitle":"Delete evaluations","openapi":"delete /api/v1/v-ciso/organizations/{organizationid}/workflows/{workflowid}/evaluations","href":"/api-reference/v-ciso/delete-workflow-evaluations"}]},{"group":"Incident Notification","pages":[{"group":"Incidents","pages":[{"title":"List incidents","sidebarTitle":"List incidents","openapi":"get /api/v1/v-ciso/incidents/{organizationid}","href":"/api-reference/v-ciso/list-incidents"},{"title":"Get incident","sidebarTitle":"Get incident","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}","href":"/api-reference/v-ciso/get-incident"},{"title":"Create incident","sidebarTitle":"Create incident","openapi":"post /api/v1/v-ciso/incidents/{organizationid}","href":"/api-reference/v-ciso/create-incident"},{"title":"Update incident","sidebarTitle":"Update incident","openapi":"patch /api/v1/v-ciso/incidents/{organizationid}/{incidentid}","href":"/api-reference/v-ciso/update-incident"},{"title":"Delete incident","sidebarTitle":"Delete incident","openapi":"delete /api/v1/v-ciso/incidents/{organizationid}/{incidentid}","href":"/api-reference/v-ciso/delete-incident"}]},{"group":"ACN Filings","pages":[{"title":"Get the ACN incident form schema","sidebarTitle":"ACN form schema","openapi":"get /api/v1/v-ciso/incidents/acn-form","href":"/api-reference/v-ciso/get-acn-incident-form"},{"title":"List the ACN filings of an incident","sidebarTitle":"List filings","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings","href":"/api-reference/v-ciso/list-incident-filings"},{"title":"Start the next ACN filing of an incident","sidebarTitle":"Start the next filing","openapi":"post /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings","href":"/api-reference/v-ciso/start-incident-filing"},{"title":"Get an ACN filing","sidebarTitle":"Get filing","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings/{filingid}","href":"/api-reference/v-ciso/get-incident-filing"},{"title":"Update the values of an ACN filing","sidebarTitle":"Update filing values","openapi":"patch /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings/{filingid}","href":"/api-reference/v-ciso/update-incident-filing"},{"title":"Mark an ACN filing as sent","sidebarTitle":"Mark filing as sent","openapi":"post /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings/{filingid}/file","href":"/api-reference/v-ciso/mark-incident-filing-sent"},{"title":"Export an ACN filing","sidebarTitle":"Export filing","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/filings/{filingid}/export","href":"/api-reference/v-ciso/export-incident-filing"}]},{"group":"Incident Attachments","pages":[{"title":"List incident attachments","sidebarTitle":"List incident attachments","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/attachments","href":"/api-reference/v-ciso/list-incident-attachments"},{"title":"Download incident attachment","sidebarTitle":"Download incident attachment","openapi":"get /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/attachments/{attachmentid}/download","href":"/api-reference/v-ciso/download-incident-attachment"},{"title":"Upload incident attachment","sidebarTitle":"Upload incident attachment","openapi":"post /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/attachments","href":"/api-reference/v-ciso/upload-incident-attachment"},{"title":"Delete incident attachment","sidebarTitle":"Delete incident attachment","openapi":"delete /api/v1/v-ciso/incidents/{organizationid}/{incidentid}/attachments/{attachmentid}","href":"/api-reference/v-ciso/delete-incident-attachment"}]}]}]},{"group":"Perimeter Protection","pages":[{"group":"Threat Blocker","pages":[{"group":"ATB Devices","pages":[{"title":"List Threat Blocker configurations","sidebarTitle":"List ATB","openapi":"get /api/v1/atb","href":"/api-reference/atb/list-threat-blocker-configurations"},{"title":"Get Threat Blocker configuration","sidebarTitle":"Retrieve ATB","openapi":"get /api/v1/atb/{id}","href":"/api-reference/atb/get-threat-blocker-configuration"},{"title":"Create Threat Blocker configuration","sidebarTitle":"Create ATB","openapi":"post /api/v1/atb","href":"/api-reference/atb/create-threat-blocker-configuration"},{"title":"Update Threat Blocker configuration","sidebarTitle":"Update ATB","openapi":"put /api/v1/atb/{id}","href":"/api-reference/atb/update-threat-blocker-configuration"},{"title":"Delete Threat Blocker configuration","sidebarTitle":"Delete ATB","openapi":"delete /api/v1/atb/{id}","href":"/api-reference/atb/delete-threat-blocker-configuration"}]},{"group":"Traffic Logs","pages":[{"title":"Get Threat Blocker traffic logs v2","sidebarTitle":"List Traffic V2","openapi":"get /api/v1/atb/{id}/traffic-v2","href":"/api-reference/atb/retrieve-latest-traffic-logs-for-a-specific-device-1"}]},{"group":"Traffic Statistics","pages":[{"title":"Retrieve traffic statistics for a specific ATB device","sidebarTitle":"List Stats V2","openapi":"get /api/v1/atb/{id}/traffic/stats-v2","href":"/api-reference/atb/retrieve-traffic-statistics-for-a-specific-atb-device"},{"title":"Blocked requests over the last 7 days","sidebarTitle":"List Blocked Requests","openapi":"get /api/v1/atb/{atb_id}/blocked-requests","href":"/api-reference/atb/blocked-requests-over-the-last-7-days"},{"title":"Most blocked IPs","sidebarTitle":"Most blocked IPs","openapi":"get /api/v1/atb/{atb_id}/most-blocked-ips","href":"/api-reference/atb/most-blocked-source-ips"},{"title":"Traffic stats per crime level","sidebarTitle":"Traffic stats per crime level","openapi":"get /api/v1/atb/{atb_id}/traffic/crime-level-stats","href":"/api-reference/atb/traffic-stats-per-crime-level"},{"title":"Get Threat Blocker attacker insights","sidebarTitle":"Attacker insights","openapi":"get /api/v1/atb/{atb_id}/insights","href":"/api-reference/atb/get-atb-attacker-insights"},{"title":"Get Threat Blocker blocks by weekday and hour","sidebarTitle":"Activity by weekday and hour","openapi":"get /api/v1/atb/{atb_id}/activity-week","href":"/api-reference/atb/get-atb-activity-week"}]}]},{"group":"Cloud Defender","pages":[{"group":"Devices","pages":[{"title":"List Cloud Defender configurations","sidebarTitle":"List Cloud Defender","openapi":"get /api/v1/cloud-defender","href":"/api-reference/cloud-defender/list-cloud-defender-configurations"},{"title":"Get Cloud Defender configuration","sidebarTitle":"Retrieve Cloud Defender","openapi":"get /api/v1/cloud-defender/{id}","href":"/api-reference/cloud-defender/get-cloud-defender-configuration"},{"title":"Create Cloud Defender configuration","sidebarTitle":"Create Cloud Defender","openapi":"post /api/v1/cloud-defender","href":"/api-reference/cloud-defender/create-cloud-defender-configuration"},{"title":"Update Cloud Defender configuration","sidebarTitle":"Update Cloud Defender","openapi":"put /api/v1/cloud-defender/{id}","href":"/api-reference/cloud-defender/update-cloud-defender-configuration"},{"title":"Delete Cloud Defender configuration","sidebarTitle":"Delete Cloud Defender","openapi":"delete /api/v1/cloud-defender/{id}","href":"/api-reference/cloud-defender/delete-cloud-defender-configuration"},{"title":"Check a web app before adding it to Cloud Defender","sidebarTitle":"Check a web app","openapi":"post /api/v1/cloud-defender/precheck","href":"/api-reference/cloud-defender/precheck-cloud-defender-web-app"}]},{"group":"Activation","pages":[{"title":"Get Cloud Defender activation steps","sidebarTitle":"Get activation steps","openapi":"get /api/v1/cloud-defender/{id}/activation","href":"/api-reference/cloud-defender/get-cloud-defender-activation"},{"title":"Mark a Cloud Defender origin as locked","sidebarTitle":"Mark origin locked","openapi":"post /api/v1/cloud-defender/{id}/activation/origin-locked","href":"/api-reference/cloud-defender/mark-cloud-defender-origin-locked"},{"title":"Withdraw the Cloud Defender origin lock mark","sidebarTitle":"Withdraw origin locked","openapi":"delete /api/v1/cloud-defender/{id}/activation/origin-locked","href":"/api-reference/cloud-defender/withdraw-cloud-defender-origin-locked"}]},{"group":"Traffic","pages":[{"title":"Get Cloud Defender traffic logs","sidebarTitle":"List Traffic","openapi":"get /api/v1/cloud-defender/{id}/traffic","href":"/api-reference/cloud-defender/get-cloud-defender-traffic-logs"},{"title":"Get Cloud Defender traffic summary","sidebarTitle":"Traffic Summary","openapi":"get /api/v1/cloud-defender/{id}/traffic/summary","href":"/api-reference/cloud-defender/get-cloud-defender-traffic-summary"},{"title":"Get Cloud Defender blocked threats by weekday and hour","sidebarTitle":"Activity by weekday and hour","openapi":"get /api/v1/cloud-defender/{id}/traffic/activity-week","href":"/api-reference/cloud-defender/get-cloud-defender-activity-week"}]},{"group":"Detections","pages":[{"title":"Get Cloud Defender detections","sidebarTitle":"List Detections","openapi":"get /api/v1/cloud-defender/{id}/security-events","href":"/api-reference/cloud-defender/get-cloud-defender-security-events"},{"title":"Mark a Cloud Defender detection legit or ban its source","sidebarTitle":"Mark legit or ban","openapi":"post /api/v1/cloud-defender/{id}/security-events/{event_id}/verdict","href":"/api-reference/cloud-defender/set-cloud-defender-detection-verdict"},{"title":"Withdraw a Cloud Defender legit verdict","sidebarTitle":"Withdraw legit verdict","openapi":"delete /api/v1/cloud-defender/{id}/security-events/{event_id}/verdict","href":"/api-reference/cloud-defender/withdraw-cloud-defender-detection-verdict"},{"title":"Block SQL injection and XSS on Cloud Defender","sidebarTitle":"Block SQL injection and XSS","description":"Switch blocking of SQL injection, cross-site scripting and the other attack signatures on or off for one domain, with `{\"enabled\": true}` or `{\"enabled\": false}`. It is off by default: matches are only detected and listed by “Get Cloud Defender detections”. When it is on, matching requests are refused at the edge within about five minutes; switching it off undoes it in the same time. “Get Cloud Defender configuration” returns the current state as `signature_blocking` (`enabled`, `at`, `by`); when it is absent, blocking is off. A signature can also match a request your site needs: test the site after switching it on, and switch it off if it refuses something legitimate. Owners and security officers with a live licence; anyone else gets 404, and an `enabled` that is not a boolean gets 400.","openapi":"put /api/v1/cloud-defender/{id}/signature-blocking","href":"/api-reference/cloud-defender/set-cloud-defender-signature-blocking"}]},{"group":"Protection lists","pages":[{"title":"List Cloud Defender banned and allowed addresses","sidebarTitle":"List banned and allowed IPs","openapi":"get /api/v1/cloud-defender/{id}/ip-rules","href":"/api-reference/cloud-defender/list-cloud-defender-ip-rules"},{"title":"Block or always allow an address on Cloud Defender","sidebarTitle":"Block or allow an IP","description":"Add an address or a CIDR range to a domain's lists. `action: block` bans it, for `hours` (1 to 2160) or until you remove it; `action: allow` puts it on the Whitelist, so it skips the banned list and Threat Intelligence. Cloud Defender applies the change within about two minutes. Private addresses, Cloudflare's network and Google's own services are refused with a `400` and a reason code. Owners and security officers with a live licence.","openapi":"post /api/v1/cloud-defender/{id}/ip-rules","href":"/api-reference/cloud-defender/add-cloud-defender-ip-rule"},{"title":"Remove a banned or allowed address from Cloud Defender","sidebarTitle":"Unban or remove an IP","openapi":"delete /api/v1/cloud-defender/{id}/ip-rules/{rule_id}","href":"/api-reference/cloud-defender/remove-cloud-defender-ip-rule"},{"title":"Undo the removal of a Cloud Defender address","sidebarTitle":"Undo an IP removal","openapi":"post /api/v1/cloud-defender/{id}/ip-rules/{rule_id}/restore","href":"/api-reference/cloud-defender/restore-cloud-defender-ip-rule"},{"title":"List Cloud Defender restricted pages","sidebarTitle":"List restricted pages","openapi":"get /api/v1/cloud-defender/{id}/restricted-paths","href":"/api-reference/cloud-defender/list-cloud-defender-restricted-pages"},{"title":"Restrict a page on Cloud Defender","sidebarTitle":"Restrict a page","openapi":"post /api/v1/cloud-defender/{id}/restricted-paths","href":"/api-reference/cloud-defender/add-cloud-defender-restricted-page"},{"title":"Change a Cloud Defender restricted page","sidebarTitle":"Change a restricted page","openapi":"put /api/v1/cloud-defender/{id}/restricted-paths/{path_id}","href":"/api-reference/cloud-defender/update-cloud-defender-restricted-page"},{"title":"Remove a Cloud Defender restricted page","sidebarTitle":"Remove a restricted page","openapi":"delete /api/v1/cloud-defender/{id}/restricted-paths/{path_id}","href":"/api-reference/cloud-defender/remove-cloud-defender-restricted-page"},{"title":"Undo the removal of a Cloud Defender restricted page","sidebarTitle":"Undo a restricted page removal","openapi":"post /api/v1/cloud-defender/{id}/restricted-paths/{path_id}/restore","href":"/api-reference/cloud-defender/restore-cloud-defender-restricted-page"},{"title":"Get a Cloud Defender country rule","sidebarTitle":"Get country rule","openapi":"get /api/v1/cloud-defender/{id}/countries","href":"/api-reference/cloud-defender/get-cloud-defender-country-rule"},{"title":"Set a Cloud Defender country rule","sidebarTitle":"Set country rule","openapi":"put /api/v1/cloud-defender/{id}/countries","href":"/api-reference/cloud-defender/set-cloud-defender-country-rule"},{"title":"Remove a Cloud Defender country rule","sidebarTitle":"Remove country rule","openapi":"delete /api/v1/cloud-defender/{id}/countries","href":"/api-reference/cloud-defender/remove-cloud-defender-country-rule"},{"title":"Undo the removal of a Cloud Defender country rule","sidebarTitle":"Undo country rule removal","openapi":"post /api/v1/cloud-defender/{id}/countries/restore","href":"/api-reference/cloud-defender/restore-cloud-defender-country-rule"}]}]},{"group":"Log Analysis","pages":[{"title":"List log analyses","sidebarTitle":"List log analyses","openapi":"get /api/v1/log-analysis","href":"/api-reference/log-analysis/list-log-analyses"},{"title":"Get log analysis","sidebarTitle":"Get log analysis","openapi":"get /api/v1/log-analysis/{id}","href":"/api-reference/log-analysis/get-log-analysis"},{"title":"Create log analysis","sidebarTitle":"Create log analysis","openapi":"post /api/v1/log-analysis","href":"/api-reference/log-analysis/create-log-analysis"},{"title":"Rename a log analysis","sidebarTitle":"Rename log analysis","openapi":"patch /api/v1/log-analysis/{id}","href":"/api-reference/log-analysis/rename-log-analysis"},{"title":"Delete log analysis","sidebarTitle":"Delete log analysis","openapi":"delete /api/v1/log-analysis/{id}","href":"/api-reference/log-analysis/delete-log-analysis"}]},{"group":"Threat Intelligence","pages":[{"title":"Get threat intelligence IP list","sidebarTitle":"IP list","openapi":"get /api/v1/perimeter-protection/threat-intelligence/ip/list","href":"/api-reference/perimeter-protection/get-threat-intelligence-ip-list"},{"title":"Check IP threat intelligence","sidebarTitle":"Check IP threat intelligence","openapi":"get /api/v1/perimeter-protection/threat-intelligence/ip/{ip}","href":"/api-reference/perimeter-protection/check-ip-threat-intelligence"},{"title":"Get IP intelligence","sidebarTitle":"Get IP intelligence","openapi":"get /api/v1/perimeter-protection/threat-intelligence/ip/{ip}/intel","href":"/api-reference/perimeter-protection/get-ip-intelligence"},{"title":"Check URL threat intelligence","sidebarTitle":"Check URL threat intelligence","openapi":"get /api/v1/perimeter-protection/threat-intelligence/url/{url}","href":"/api-reference/perimeter-protection/check-url-threat-intelligence"},{"title":"Get threat intelligence domain list","sidebarTitle":"Domain list","openapi":"get /api/v1/perimeter-protection/threat-intelligence/domain/list","href":"/api-reference/perimeter-protection/get-threat-intelligence-domain-list"},{"title":"Check file threat intelligence","sidebarTitle":"Check file threat intelligence","openapi":"get /api/v1/perimeter-protection/threat-intelligence/file/{file}","href":"/api-reference/perimeter-protection/check-file-threat-intelligence"},{"title":"Check domain threat intelligence","sidebarTitle":"Check domain","openapi":"get /api/v1/perimeter-protection/threat-intelligence/domain/{domain}","href":"/api-reference/perimeter-protection/check-domain-threat-intelligence"}]}]},{"group":"Virtual Private Network","pages":[{"title":"List VPN profiles","sidebarTitle":"List VPN profiles","openapi":"get /api/v1/vpn","href":"/api-reference/vpn/list-vpn-profiles"},{"title":"Get VPN profile","sidebarTitle":"Get VPN profile","openapi":"get /api/v1/vpn/{id}","href":"/api-reference/vpn/get-vpn-profile"},{"title":"Create VPN profile","sidebarTitle":"Create VPN profile","openapi":"post /api/v1/vpn","href":"/api-reference/vpn/create-vpn-profile"},{"title":"Delete VPN profile","sidebarTitle":"Delete VPN profile","openapi":"delete /api/v1/vpn/{id}","href":"/api-reference/vpn/delete-vpn-profile"}]},{"group":"Organizations","pages":[{"group":"Organization","pages":[{"title":"List organizations","sidebarTitle":"List organizations","openapi":"get /api/v1/organizations","href":"/api-reference/organizations/list-organizations"},{"title":"Get organization","sidebarTitle":"Get organization","openapi":"get /api/v1/organizations/{id}","href":"/api-reference/organizations/get-organization"},{"title":"Create organization","sidebarTitle":"Create organization","openapi":"post /api/v1/organizations","href":"/api-reference/organizations/create-organization"},{"title":"Update organization","sidebarTitle":"Update organization","openapi":"put /api/v1/organizations/{id}","href":"/api-reference/organizations/update-organization"},{"title":"Delete organization","sidebarTitle":"Delete organization","openapi":"delete /api/v1/organizations/{id}","href":"/api-reference/organizations/delete-organization"},{"title":"Compute NIS 2 assessment","sidebarTitle":"Compute NIS 2 assessment","openapi":"get /api/v1/organizations/nis2-assessment","href":"/api-reference/organizations/compute-nis2-assessment"}]},{"group":"Branding","pages":[{"title":"Get organization branding","sidebarTitle":"Get organization branding","openapi":"get /api/v1/organizations/{id}/branding","href":"/api-reference/organizations/get-organization-branding"},{"title":"Upload organization logo","sidebarTitle":"Upload organization logo","openapi":"post /api/v1/organizations/{id}/branding/logo","href":"/api-reference/organizations/upload-organization-logo"},{"title":"Refresh an organization logo","sidebarTitle":"Refresh logo","openapi":"post /api/v1/organizations/{id}/logo/refresh","href":"/api-reference/organizations/refresh-organization-logo"},{"title":"Update organization branding","sidebarTitle":"Update organization branding","openapi":"put /api/v1/organizations/{id}/branding","href":"/api-reference/organizations/update-organization-branding"},{"title":"Delete organization logo","sidebarTitle":"Delete organization logo","openapi":"delete /api/v1/organizations/{id}/branding/logo","href":"/api-reference/organizations/delete-organization-logo"}]}]},{"group":"Administration","pages":[{"group":"Users","pages":[{"title":"List organization users","sidebarTitle":"List organization users","openapi":"get /api/v1/organizations/{organizationid}/users","href":"/api-reference/organizations/list-organization-users"},{"title":"Add user to organization","sidebarTitle":"Add user to organization","openapi":"post /api/v1/organizations/{organizationid}/users/{userid}","href":"/api-reference/organizations/add-user-to-organization"},{"title":"Update organization user role","sidebarTitle":"Update organization user role","openapi":"put /api/v1/organizations/{organizationid}/users/{userid}","href":"/api-reference/organizations/update-organization-user-role"},{"title":"Remove user from organization","sidebarTitle":"Remove user from organization","openapi":"delete /api/v1/organizations/{organizationid}/users/{userid}","href":"/api-reference/organizations/remove-user-from-organization"}]},{"group":"Subscriptions","pages":[{"title":"List licenses","sidebarTitle":"List Licenses","openapi":"get /api/v1/settings/licenses","href":"/api-reference/organizations/list-licenses"},{"title":"List organization subscriptions","sidebarTitle":"List Subscriptions","openapi":"get /api/v1/organizations/{organizationid}/subscriptions","href":"/api-reference/organizations/list-organization-subscriptions"},{"title":"Create organization subscription","sidebarTitle":"Create Subscriptions","openapi":"post /api/v1/organizations/{organizationid}/subscriptions/{licenseid}","href":"/api-reference/organizations/create-organization-subscription"},{"title":"Update organization subscription","sidebarTitle":"Update Subscriptions","openapi":"put /api/v1/organizations/{organizationid}/subscriptions/{licenseid}","href":"/api-reference/organizations/update-organization-subscription"},{"title":"Delete organization subscription","sidebarTitle":"Delete Subscriptions","openapi":"delete /api/v1/organizations/{organizationid}/subscriptions/{licenseid}","href":"/api-reference/organizations/delete-organization-subscription"}]}]},{"group":"Settings / Profile","pages":[{"group":"Notifications","pages":[{"title":"List notifications","sidebarTitle":"List notifications","openapi":"get /api/v1/notifications","href":"/api-reference/notifications/list-notifications"},{"title":"Mark a notification as read","sidebarTitle":"Mark as read","openapi":"put /api/v1/notifications/{id}","href":"/api-reference/notifications/mark-notifications-as-read"},{"title":"Mark all notifications as read","sidebarTitle":"Mark all as read","openapi":"put /api/v1/notifications/read-all","href":"/api-reference/notifications/mark-all-notifications-as-read"},{"title":"Dismiss a notification","sidebarTitle":"Dismiss a notification","openapi":"delete /api/v1/notifications/{id}","href":"/api-reference/notifications/dismiss-notification"},{"title":"Dismiss all notifications of a service","sidebarTitle":"Dismiss all of a service","openapi":"put /api/v1/notifications/dismiss-all","href":"/api-reference/notifications/dismiss-all-notifications"},{"title":"Undo the dismissal of notifications","sidebarTitle":"Undo dismissal","openapi":"post /api/v1/notifications/restore","href":"/api-reference/notifications/restore-notifications"}]},{"group":"Terms","pages":[{"title":"Get terms and conditions","sidebarTitle":"Get terms","openapi":"get /api/v1/terms","href":"/api-reference/terms/get-apiv1terms"},{"title":"Accept terms and conditions","sidebarTitle":"Accept terms","openapi":"post /api/v1/terms/accept","href":"/api-reference/terms/post-apiv1termsaccept"}]}]},{"group":"Other","pages":[{"title":"Download document","sidebarTitle":"Download document","openapi":"get /api/v1/documents/{file}","href":"/api-reference/documents/download-document"}]}]}]}]},"title":"List Cloud Defender banned and allowed addresses - Aegister S.p.A.","buildId":"dpl_2xiSHD9XEvLsPGPcfoMtkLTB3dy9","deploymentId":"dpl_2xiSHD9XEvLsPGPcfoMtkLTB3dy9","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-DmVyH30O.js","utils-BHQqGGOd.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-CD-E4BIt.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-Bp5Lq9Ds.js","snippetPresets-C4xAVCFP.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-CgXVLxUC.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BF8I5oUf.js","shallow-Byd0lWnC.js","getApiPlaygroundDisplay-BGOZG1OK.js","CodeSnippet-CpvQL0CY.js","CodeSnippets-B8wkBKXa.js","Page-CBCH2P7b.js","getPastedJson-Ry3scI3Y.js","icon-D7a9HcdD.js","MethodPill-CJ8pmHhz.js","DuplicateIcon-rh1HJF0t.js","createIcon-DvGznqYs.js","DynamicMarkdown-Cc6AuSHS.js","SectionHeading-B4A0S-ep.js","axios-vUo_bRtp.js","Markdown-Cc16CX65.js","clsx-Cs6nMGht.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-zbf22OZA.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-C_fs-y5n.js"]}