> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aegister.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Undo the removal of a Cloud Defender address

> Put back an address you unbanned or took off the Whitelist, within 10 minutes of “Unban or remove an IP”. The entry comes back as it was; a ban set from a detection brings its ban verdict back too. It answers 400 after 10 minutes, once a ban's time is up, when the address is on the other list again, or when the address could not be listed today. 503 means the threat feed that checks addresses could not be read: try again. Owners and security officers with a live licence.



## OpenAPI

````yaml post /api/v1/cloud-defender/{id}/ip-rules/{rule_id}/restore
openapi: 3.1.0
info:
  title: Aegister API
  version: 2.10.0
servers: []
security: []
paths:
  /api/v1/cloud-defender/{id}/ip-rules/{rule_id}/restore:
    post:
      tags:
        - cloud-defender
      summary: Undo the removal of an address from a Cloud Defender domain's list
      description: >-
        Within 10 minutes of its removal the entry comes back as it was, an
        unban's ban verdict with it; not once a

        ban's time is up, the address is on the other list again or a new entry
        would be refused.
      operationId: cloud_defender_ip_rules_restore_create
      parameters:
        - in: path
          name: id
          schema:
            type: integer
          required: true
        - in: path
          name: rule_id
          schema:
            type: integer
          required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: integer
                    description: |-
                      Any value different from 0 indicates an error.  
                      More details can be found in `messages`.
                    minimum: 0
                    maximum: 0
                    examples:
                      - 0
                  messages:
                    type: array
                    description: >-
                      If `error` is `1`, contains zero or more details on the
                      error.
                    examples:
                      - []
                  data:
                    type: object
                    properties:
                      id:
                        type: integer
                      net:
                        type: string
                        description: One address, a v4 /24 or a v6 /64.
                      action:
                        type: string
                        enum:
                          - block
                          - allow
                        description: >-
                          `block`: banned on this domain. `allow`: on its
                          whitelist.
                      source:
                        type: string
                        enum:
                          - manual
                          - auto_ban
                        description: >-
                          `manual`: added by a person (this API, the console's
                          Protection tab or a Ban button). `auto_ban`: banned
                          automatically by Cloud Defender for 24 hours, after a
                          burst of requests it blocked as attacks on this
                          domain.
                      reason:
                        type: string
                      expires_at:
                        type:
                          - string
                          - 'null'
                        format: date-time
                        description: When a ban ends. Null = until removed.
                      created_at:
                        type: string
                        format: date-time
                      created_by:
                        type:
                          - string
                          - 'null'
                        description: The user who added it.
                      event_id:
                        type:
                          - integer
                          - 'null'
                        description: The detection a ban came from, while it still exists.
              examples:
                BannedAgain:
                  value:
                    error: 0
                    messages: []
                    data:
                      id: 41
                      net: 203.0.113.7
                      action: block
                      source: manual
                      reason: Scanning our login page
                      expires_at: '2026-11-27T09:30:00Z'
                      created_at: '2026-10-28T09:30:00Z'
                      created_by: 00000000-0000-4000-8000-000000000000
                      event_id: 1520
                  summary: Banned again
          description: ''
        '400':
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: integer
                    description: |-
                      Any value different from 0 indicates an error.  
                      More details can be found in `messages`.
                    minimum: 0
                    maximum: 0
                    examples:
                      - 1
                  messages:
                    type: array
                    description: >-
                      If `error` is `1`, contains zero or more details on the
                      error.
                    examples:
                      - - Invalid data provided
                        - net_listed
                        - net_known_good
          description: ''
        '404':
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: integer
                    description: |-
                      Any value different from 0 indicates an error.  
                      More details can be found in `messages`.
                    minimum: 0
                    maximum: 0
                    examples:
                      - 1
                  messages:
                    type: array
                    description: >-
                      If `error` is `1`, contains zero or more details on the
                      error.
                    examples:
                      - []
          description: ''
        '503':
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: integer
                    description: |-
                      Any value different from 0 indicates an error.  
                      More details can be found in `messages`.
                    minimum: 0
                    maximum: 0
                    examples:
                      - 1
                  messages:
                    type: array
                    description: >-
                      If `error` is `1`, contains zero or more details on the
                      error.
                    examples:
                      - []
          description: ''
      security:
        - ApiKeyAuth: []
components:
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-Aegister-Token

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.