Queries the details of an intrusion event in a honeypot.
Debugging
Authorization information
There is currently no authorization information disclosed in the API.
Request parameters
Parameter | Type | Required | Description | Example |
---|---|---|---|---|
Dealed | string | No | The status of the event. Valid values:
| n |
SecurityEventId | long | No | The ID of the alert event. The ID of the management account of the ListHoneypotEvents resource directory. Note
You can call the ListHoneypotEvents operation to query the IDs of alert events.
| 7455818 |
CurrentPage | integer | No | The page number. Default value: 1. | 1 |
PageSize | integer | No | The number of entries per page. Default value: 20. If you leave this parameter empty, 20 entries are returned on each page. Note
We recommend that you do not leave this parameter empty.
| 20 |
RequestId | string | No | The request ID. | 20540822-520E-54F5-B7E6-236CF1EC987F |
Lang | string | No | The language of the content within the request and response. Default value: zh. Valid values:
| zh |
Response parameters
Examples
Sample success responses
JSON
format
{
"HoneypotEventFlows": [
{
"SecurityEventId": 306527555,
"HoneypotEventId": "19bec028-d98b-45c4-a4d9-cc3d593f****",
"LastTime": 1686622222000,
"FirstTime": 1686621122000,
"EventConnection": "fd7f1ff4-0c4b-41cb-99ad-0724349d****",
"AgentId": "d3c0dafa-5059-4eb0-8c28-7d40f58*****",
"AgentName": "hw-d***",
"HoneypotId": "911df9d6fe20451c059edbcffa1d1c33452f6a71e59d4826da067af224*****",
"HoneypotName": "hw-zhi*****",
"DockerId": "eca09895****",
"DstIp": "112.126.205.***",
"DstPort": 80,
"SrcIp": "121.41.48.***",
"SrcMac": "00:0C:29:CA:**:**",
"SrcPort": 80,
"TypeId": "web_access",
"RiskLevel": "4",
"Extra": "{\\\"payload\\\":{\\\"format\\\":\\\"line\\\",\\\"name\\\":{\\\"cn\\\":\\\"payload\\\",\\\"en\\\":\\\"payload\\\"},\\\"value\\\":\\\"\\\"},\\\"uid\\\":{\\\"format\\\":\\\"line\\\",\\\"name\\\":{\\\"cn\\\":\\\"\\\",\\\"en\\\":\\\"\\\"},\\\"uid\\\":\\\"5fa2ece9-aa08-4bbd-a272-5d27*********\\\",\\\"value\\\":\\\"\\\"}}",
"Extra1": "{\\\"vpc_id\\\":\\\"\\\",\\\"vpc_dest_port\\\":\\\"\\\",\\\"vpc_dest_ip\\\":\\\"\\\"}",
"Uid": "5fa2ece9-aa08-4bbd-a272-5d27d1c6*****",
"Status": 1,
"FileOssUrl": "https://pop-test-file-upload.oss-cn-beijing.aliyuncs.com/5626_26331*****"
}
],
"PageInfo": {
"CurrentPage": 1,
"PageSize": 20,
"TotalCount": 78,
"Count": 20
},
"Success": true,
"Code": "200",
"Message": "successful",
"RequestId": "9F4E6157-9600-5588-86B9-38F09067****",
"HttpStatusCode": 200
}
Error codes
HTTP status code | Error code | Error message | Description |
---|---|---|---|
400 | IllegalParam | Illegal param | - |
403 | NoPermission | caller has no permission | You are not authorized to do this operation. |
500 | ServerError | ServerError | - |
For a list of error codes, visit the Service error codes.