DescribeNetworkLayerIntercepts

Updated at:
Copy as MD

Anti-DDoS Origin: Query network layer blocking logs

Operation description

Use this API operation to query paginated Layer 3 and Layer 4 packet blocking logs for all DDoS Origin Protection instances in your Alibaba Cloud account.

QPS limit

The per-user QPS limit for this API operation is 10 queries per second. If you exceed this limit, subsequent API calls will be rate-limited.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request syntax

GET  HTTP/1.1

Request parameters

Parameter

Type

Required

Description

Example

InstanceId

string

Yes

The ID of the Anti-DDoS Origin instance.

ddosbgp-cn-z2q1qzxb****

SrcIp

string

No

The source IP address.

37.60.241.154

DestinationIp

string

No

The destination IP address.

47.118.170.18

NetworkProtocol

string

No

The network protocol.

tcp

SourcePort

integer

No

The source port.

5432

DestinationPort

integer

No

The destination port.

8080

StartTime

integer

Yes

The beginning of the time range to query. This is a UNIX timestamp. Unit: seconds.

1557305044

EndTime

integer

Yes

The end of the time range to query. This is a UNIX timestamp. Unit: seconds.

1563445054

Page

integer

No

The page number.

1

PageSize

integer

No

The number of entries per page.

10

ProtocolNumber

integer

No

The IANA protocol number.

6

Response elements

Element

Type

Description

Example

object

The response schema.

RequestId

string

The request ID.

B4B379C2-9319-4C6B-B579-FE36831B09F4

TotalCnt

string

The total number of interception records that match the filter criteria.

17

InterceptionRecordCount

integer

The number of interception records returned.

10

InterceptionRecords

array<object>

The details of each interception record.

object

SourceIp

string

The source IP.

183.224.38.37

DestinationIp

string

The destination IP.

47.254.56.252

NetworkProtocol

string

The network protocol.

tcp

ProtocolNumber

string

The standard protocol number.

6

SourcePort

string

The source port in the interception record.

9998

DestinationPort

string

The destination port in the interception record.

22

InterceptStartTime

integer

The interception start time.

1778830500

InterceptEndTime

integer

The interception end time.

1778830500

InterceptAction

string

The interception action.

drop

InterceptModule

string

The packet interception module.

dip_blacklist

InterceptCount

integer

The interception count within the specified time range.

1

Examples

Success response

JSON format

{
  "RequestId": "B4B379C2-9319-4C6B-B579-FE36831B09F4",
  "TotalCnt": "17",
  "InterceptionRecordCount": 10,
  "InterceptionRecords": [
    {
      "SourceIp": "183.224.38.37",
      "DestinationIp": "47.254.56.252",
      "NetworkProtocol": "tcp",
      "ProtocolNumber": "6",
      "SourcePort": "9998",
      "DestinationPort": "22",
      "InterceptStartTime": 1778830500,
      "InterceptEndTime": 1778830500,
      "InterceptAction": "drop",
      "InterceptModule": "dip_blacklist",
      "InterceptCount": 1
    }
  ]
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.