WAF安全日志
获取聚合攻击事件
按来源IP、目标端口和域名聚合的攻击事件统计，支持多维度筛选和分页
get/api/v1/waf/logs/events
Query parameters
srcIpstring
来源IP地址，攻击者地址
dstIpstring
目标IP地址，被攻击的服务器地址
domainstring
域名，被攻击的站点域名
srcPortinteger
来源端口号，发起攻击的端口
dstPortinteger
目标端口号，被攻击的服务端口
startTimestring
查询起始时间 (ISO8601格式，如: 2024-03-17T00:00:00Z)
endTimestring
查询结束时间 (ISO8601格式，如: 2024-03-18T23:59:59Z)
pageinteger
当前页码，从1开始计数 (默认: 1)
pageSizeinteger
每页记录数，最大100条 (默认: 10)
Response
成功
Example response
{
"code": 200,
"data": {
"currentPage": 1,
"pageSize": 10,
"results": [
{
"count": 15,
"domain": "example.com",
"dstPort": 443,
"durationInMinutes": 18.2,
"firstAttackTime": "2024-03-18T08:12:33Z",
"isOngoing": true,
"lastAttackTime": "2024-03-18T08:30:45Z",
"srcIp": "192.168.1.100",
"srcIpInfo": {
"asn": {
"number": 4134,
"organization": "China Telecom"
},
"city": {
"nameEn": "Hangzhou",
"nameZh": "杭州"
},
"continent": {
"nameEn": "Asia",
"nameZh": "亚洲"
},
"country": {
"isoCode": "CN",
"nameEn": "China",
"nameZh": "中国"
},
"location": {
"latitude": 30.2943,
"longitude": 120.1663,
"timeZone": "Asia/Shanghai"
},
"subdivision": {
"isoCode": "ZJ",
"nameEn": "Zhejiang",
"nameZh": "浙江"
}
}
}
],
"totalCount": 35,
"totalPages": 4
},
"message": "操作成功",
"requestId": "550e8400-e29b-41d4-a716-446655440000",
"success": true,
"timestamp": "2023-01-01T12:00:00Z"
}