Skip to content

Your plan must include log access. On ISP, Datacenter and Gaming each record is a CONNECTION and is written when the connection closes; the fields are explained on the Log records page. The newest record comes first.

Every record comes back with the same fixed set of keys; a field without a value is not left out, it is null.

Invalid filter values are not silently ignored; they return 400 invalid_request. An unknown parameter, a range whose start is after its end, or an ISP-only parameter sent for a Mobile/Residential service also returns 400; details.field tells you which parameter. offset + limit cannot exceed 10000.

If meta.partial is true, the list may be incomplete: in the ISP family older records could not be read at that moment; on Mobile/Residential only the most recent records were returned. Try again shortly. If meta.source is none, this service has no log source yet. If the log store is temporarily unreachable, 503 service_unavailable is returned.

Authorization

Authorizationstringrequired

Sent as Bearer <token>. This endpoint needs the logs:read (Logs) scope; a token without it gets 403.

Path parameters

idstringrequired

The service ID. Take it from the id field of the GET /orders response.

Query parameters

levelenum<string>

Level; can be sent more than once. In the ISP family it is derived from the result code: 0 → connect, 100/101 → auth, 105/106 → quota, 201 → disconnect, other codes → error. Records before September 17, 2026 can only be connect or error.

ipstring

Free IP search. Only digits, a-f, . and : are accepted. In the ISP family a full IPv4/IPv6 address matches the client, target, exit or entry IP exactly; part of an address (e.g. 185.23) must be at least 3 characters and is searched for within the target address (records since September 17, 2026 only). On Mobile/Residential it is searched for within the target or client address. To search by domain, use target_host.

startstring

Start, ISO-8601. In the ISP family it applies to the moment the connection CLOSED and is clamped to the order's creation time; older records are not returned.

endstring

End, ISO-8601. Cannot be before the start.

min_duration_msinteger

Lower bound on how long the connection stayed open, in ms (non-negative integer). This is not latency; for latency, use min_latency_ms.

max_duration_msinteger

Upper bound on how long the connection stayed open, in ms. Cannot be less than min_duration_ms.

limitinteger

Records per page: 1-200, default 50. 0, a negative or a non-integer value returns 400; values above 200 are capped at 200 (meta.limit shows the value applied).

offsetinteger

Number of records to skip. offset + limit cannot exceed 10000; instead of paging deeper, narrow the range with start/end.

okboolean

ISP family. true returns only successful connections, false only failed ones.

resultstring

ISP family. Result code, e.g. 105. Can be repeated or comma-separated. The codes are on the Log records page.

categoryenum<string>

ISP family. Result category. Can be repeated or comma-separated.

request_idstring

ISP family. Finds a single connection by its requestId (a 26-character ULID).

client_ipstring

ISP family. Your client IP (sourceIp); a full IPv4/IPv6 address, exact match.

egress_ipstring

ISP family. Exit IP (egressIp); a full IPv4/IPv6 address, exact match.

target_hoststring

ISP family. Target hostname or part of it (letters, digits, . and -); case-insensitive. At least 3 characters; searched only in records since September 17, 2026.

serviceenum<string>

ISP family. The protocol actually used: http or socks5.

udpboolean

ISP family. true returns only UDP ASSOCIATE records; false applies no filter.

slotinteger

ISP family. Port slot number (1-100000).

portinteger

ISP family. The proxy port you connected to (gatePort, 1-65535).

min_latency_msinteger

ISP family. Connections whose connect latency is at least this many ms (1-3600000). Records with no measured latency (latencyMs null) are excluded.

Response

200
application/json
dataobject[]
metaobject