# IP

## Blocked

`com.twilio.iam.ip.blocked`

IP Blocked events are compatible with Webhook and Kinesis sinks. To learn more, you can get started with the [Webhook](/docs/events/webhook-quickstart) or [Kinesis](/docs/events/eventstreams-quickstart) quickstarts.

**Examples**

```json
{
  "specversion" : "1.0",
  "type" : "com.twilio.iam.ip.blocked",
  "source" : "AB00000000000000000000000001",
  "id" : "NO00000000000000000000000001",
  "dataschema" : "https://events-schemas.twilio.com/Iam.IPBlocked/2",
  "datacontenttype" : "2025-10-08T07:17:02.363Z",
  "data" : {
    "timestamp" : "1756056832164",
    "account_sid" : "AC0000000000000000000000000000001",
    "request_sid" : "RQ0000000000000000000000000000001",
    "address" : "172.253.115.138",
    "action" : "POST",
    "resource" : "/v1/Sinks",
    "authentication_method" : "API Key",
    "auth_sid" : "SK0000000000000000000000000000001"
  }
}
```

```json
{
  "specversion" : "1.0",
  "type" : "com.twilio.iam.ip.blocked",
  "source" : "AB00000000000000000000000001",
  "id" : "NO00000000000000000000000001",
  "dataschema" : "https://events-schemas.twilio.com/Iam.IPBlocked/2",
  "datacontenttype" : "2025-10-08T07:17:02.363Z",
  "data" : {
    "timestamp" : "1756056832164",
    "account_sid" : "AC0000000000000000000000000000001",
    "request_sid" : "RQ0000000000000000000000000000001",
    "address" : "172.253.115.138",
    "action" : "POST",
    "resource" : "/v1/Sinks",
    "authentication_method" : "Auth Token"
  }
}
```

**Versions**

#### v2 (latest)

> \[!NOTE]
>
> v2 only contains updates to the schema metadata. In other words, there are no new fields between v1 and v2.

* `string` **timestamp** (required). Time of the event in epoch millisecond format.
* `string` **account\_sid** (required). Id of the Twilio account which was used to authenticate.
* `string` **request\_sid** (required). Id of the request.
* `string` **address** (required). IP address of the caller.
* `string` **action** (required). Action of the API call.
* `string` **resource** (required). Resource path of the API call.
* `string` **authentication\_method** (required). Method used to authenticate (Auth Token, API Key).
* `string` **auth\_sid**. Id of the API key or other method used to authenticate.

The full specification for version 2 is also available as a [JSON schema](https://events-schemas.twilio.com/Iam.IPBlocked/2).

#### v1

* `string` **timestamp** (required). Time of the event in epoch millisecond format.
* `string` **account\_sid** (required). Id of the Twilio account which was used to authenticate.
* `string` **request\_sid** (required). Id of the request.
* `string` **address** (required). IP address of the caller.
* `string` **action** (required). Action of the API call.
* `string` **resource** (required). Resource path of the API call.
* `string` **authentication\_method** (required). Method used to authenticate (Auth Token, API Key).
* `string` **auth\_sid**. Id of the API key or other method used to authenticate.

The full specification for version 1 is also available as a [JSON schema](https://events-schemas.twilio.com/Iam.IPBlocked/1).

## Dry Run Blocked

`com.twilio.iam.ip.blocked.dryrun`

IP Dry Run Blocked events are compatible with Webhook and Kinesis sinks. To learn more, you can get started with the [Webhook](/docs/events/webhook-quickstart) or [Kinesis](/docs/events/eventstreams-quickstart) quickstarts.

**Examples**

```json
{
  "specversion" : "1.0",
  "type" : "com.twilio.iam.ip.blocked.dryrun",
  "source" : "AB00000000000000000000000001",
  "id" : "NO00000000000000000000000001",
  "dataschema" : "https://events-schemas.twilio.com/Iam.IPDryRunBlocked/2",
  "datacontenttype" : "2025-10-08T07:17:02.363Z",
  "data" : {
    "timestamp" : "1756056832164",
    "account_sid" : "AC0000000000000000000000000000001",
    "request_sid" : "RQ0000000000000000000000000000001",
    "address" : "172.253.115.138",
    "action" : "POST",
    "resource" : "/v1/Sinks",
    "authentication_method" : "API Key",
    "auth_sid" : "SK0000000000000000000000000000001"
  }
}
```

```json
{
  "specversion" : "1.0",
  "type" : "com.twilio.iam.ip.blocked.dryrun",
  "source" : "AB00000000000000000000000001",
  "id" : "NO00000000000000000000000001",
  "dataschema" : "https://events-schemas.twilio.com/Iam.IPDryRunBlocked/2",
  "datacontenttype" : "2025-10-08T07:17:02.363Z",
  "data" : {
    "timestamp" : "1756056832164",
    "account_sid" : "AC0000000000000000000000000000001",
    "request_sid" : "RQ0000000000000000000000000000001",
    "address" : "172.253.115.138",
    "action" : "POST",
    "resource" : "/v1/Sinks",
    "authentication_method" : "Auth Token"
  }
}
```

**Versions**

#### v2 (latest)

> \[!NOTE]
>
> v2 only contains updates to the schema metadata. In other words, there are no new fields between v1 and v2.

* `string` **timestamp** (required). Time of the event in epoch millisecond format.
* `string` **account\_sid** (required). Id of the Twilio account which was used to authenticate.
* `string` **request\_sid** (required). Id of the request.
* `string` **address** (required). IP address of the caller.
* `string` **action** (required). Action of the API call.
* `string` **resource** (required). Resource path of the API call.
* `string` **authentication\_method** (required). Method used to authenticate (Auth Token, API Key).
* `string` **auth\_sid**. Id of the API key or other method used to authenticate.

The full specification for version 2 is also available as a [JSON schema](https://events-schemas.twilio.com/Iam.IPDryRunBlocked/2).

#### v1

* `string` **timestamp** (required). Time of the event in epoch millisecond format.
* `string` **account\_sid** (required). Id of the Twilio account which was used to authenticate.
* `string` **request\_sid** (required). Id of the request.
* `string` **address** (required). IP address of the caller.
* `string` **action** (required). Action of the API call.
* `string` **resource** (required). Resource path of the API call.
* `string` **authentication\_method** (required). Method used to authenticate (Auth Token, API Key).
* `string` **auth\_sid**. Id of the API key or other method used to authenticate.

The full specification for version 1 is also available as a [JSON schema](https://events-schemas.twilio.com/Iam.IPDryRunBlocked/1).