All Products
Search
Document Center

Edge Security Acceleration:DescribeDDoSAllEventList

Last Updated:Mar 24, 2025

Queries DDoS attack events.

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • For mandatory resource types, indicate with a prefix of * .
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
esa:DescribeDDoSAllEventListget
*Site
acs:esa:{#regionId}:{#accountId}:site/{#SiteId}
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
StartTimestringYes

The beginning of the time range to query.

Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.

2023-02-12T15:00:00Z
EndTimestringNo

The end of the time range to query.

Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC. The maximum time range is 31 days.

If you do not configure this parameter, the current time is used as the end of the time range to query.

2023-02-22T15:59:59Z
EventTypestringNo

The type of DDoS attacks to query. Valid values:

  • web-cc: web resource exhaustion attacks.
  • cc: connection flood attacks.
  • traffic: volumetric attacks.

Default value: web-cc.

web-cc
PageNumberintegerYes

The page number. Valid values: 1 to 100000.

1
PageSizeintegerNo

The number of entries per page. Default value: 10. Valid values: 5, 10, and 20.

10
SiteIdlongYes

The website ID, which can be obtained by calling the ListSites operation.

7096621098****

Response parameters

ParameterTypeDescriptionExample
object

The response parameters.

RequestIdstring

The request ID.

D73A4243-CFBD-5110-876F-09237E77ECBD
SiteIdlong

The website ID.

7096621098****
TotalCountinteger

The total number of entries returned.

1
PageNumberinteger

The page number.

1
PageSizeinteger

The number of entries per page.

10
DataListarray<object>

The DDoS attack events.

DdosDomainAttackEventobject

The information about the DDoS attack.

Targetstring

The attack target.

example.com
TargetIdstring

The ID of the web resource exhaustion attack target.

000000000155****
StartTimestring

The time when the DDoS attack starts.

The time follows the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time is displayed in UTC.

2023-02-12T15:00:00Z
EndTimestring

The time when the DDoS attack ends.

The time follows the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time is displayed in UTC.

2023-02-12T15:59:59Z
EventTypestring

The type of DDoS attacks that was queried. Valid values:

  • web-cc: web resource exhaustion attacks.
  • cc: connection flood attacks.
  • traffic: volumetric attacks.
web-cc
Bpslong

The peak of volumetric attacks. Unit: bit/s.

800
Ppslong

The peak of volumetric attacks. Unit: packets per second (PPS).

12000
Cpslong

The peak of connection flood attacks. Unit: connections per seconds (CPS).

50
EventIdstring

The attack event ID.

web-cc_1
Qpslong

The peak QPS of web resource exhaustion attacks.

7692

Examples

Sample success responses

JSONformat

{
  "RequestId": "D73A4243-CFBD-5110-876F-09237E77ECBD",
  "SiteId": 0,
  "TotalCount": 1,
  "PageNumber": 1,
  "PageSize": 10,
  "DataList": [
    {
      "Target": "example.com",
      "TargetId": "000000000155****",
      "StartTime": "2023-02-12T15:00:00Z",
      "EndTime": "2023-02-12T15:59:59Z",
      "EventType": "web-cc",
      "Bps": 800,
      "Pps": 12000,
      "Cps": 50,
      "EventId": "web-cc_1",
      "Qps": 7692,
      "Coverage": "",
      "EventResult": ""
    }
  ]
}

Error codes

HTTP status codeError codeError messageDescription
400InvalidParameterThe specified parameter is invalid.The specified parameter is invalid.
500InternalErrorFailed to call the service. Try again later or contact technical support.Failed to call the service. Try again later or contact technical support.

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-11-19The Error code has changed. The response structure of the API has changedView Change Details