You can call this operation to query the quarantined files by page.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String Yes DescribeSuspEventQuaraFiles

The operation that you want to perform.

Set the value to DescribeSuspEventQuaraFiles.

SourceIp String No 1.2.3.4

The source IP address of the request.
PageSize String No 20

The number of entries to be returned on each page.
Status String No quaraDone

Specifies the states of the quarantined files to be queried. Valid values:

  • quaraFailed: The system failed to quarantine the file.
  • quaraDone: The system has quarantined the file.
  • quaraing: The file is being quarantined.
  • rollbackFailed: The system failed to undo the quarantine.
  • rollbackDone: The system has undone the quarantine.
  • rollbacking: The quarantine is being undone.
CurrentPage String No 1

Specifies the number of pages to be returned.
From String No sas

The identifier of the request source. The value is set to sas.

Response parameters

Parameter Type Example Description
Count Integer 1

The total number of pages returned.
CurrentPage Integer 1

The ordinal number of the current page returned.
PageSize Integer 20

The number of quarantined files displayed on each page.
QuaraFiles Array

The list of quarantined files.
EventName String WEBSHELL

The name of the event.
EventType String WebshellQuaraEventType

The type of the event.
Id Integer 3920516

The ID of the quarantined file.
InstanceName String abc

The ID of the server where the file is quarantined.
InternetIp String 47.XX.XX.131

The public IP address of the server where the file is quarantined.
Ip String 47.XX.XX.131

The public IP address of the server where the file is quarantined.
Md5 String 5ddebe926acc7ed39a664409bfd0ec10

The MD5 hash value of the file.
ModifyTime String 2020-06-11 20:37:08

The update time.
Path String /var/www/html/webshell-sample-master/others/defc3e21bab59e2a2ab49f7eda99f65f83d4d349.jpg

The path where the quarantined file is stored on the server.
Status String rollbackDone

Quarantine states. Valid values:

  • quaraFailed: The system failed to quarantine the file.
  • quaraDone: The system has quarantined the file.
  • quaraing: The file is being quarantined.
  • rollbackFailed: The system failed to undo the quarantine.
  • rollbackDone: The system has undone the quarantine.
  • rollbacking: The quarantine is being undone.
Tag String 228f890e56eae9eec6a42c7ea801b538

The ID of the event.
Uuid String 04a0e735-ad32-4835-b635-0458d77b****

The UUID of the server.
RequestId String 6AD0BA1B-0129-498F-B82A-17C7B8368A08

The ID of the request.
TotalCount Integer 20

The total number of quarantined files.

Examples

Sample requests

http(s)://[Endpoint]/? Action=DescribeSuspEventQuaraFiles
&<Common request parameters>

Sample success responses

XML format 

<DescribeSuspEventQuaraFilesResponse>
      <TotalCount>20</TotalCount>
      <RequestId>6AD0BA1B-0129-498F-B82A-17C7B8368A08</RequestId>
      <PageSize>20</PageSize>
      <CurrentPage>1</CurrentPage>
      <QuaraFiles>
            <Path>/var/www/html/webshell-sample-master/others/defc3e21bab59e2a2ab49f7eda99f65f83d4d349.jpg</Path>
            <InstanceName>abc</InstanceName>
            <Status>rollbackDone</Status>
            <ModifyTime>2020-06-11 20:37:08</ModifyTime>
            <Uuid>04a0e735-ad32-4835-b635-0458d77b****</Uuid>
            <InternetIp>47.XX.XX.131</InternetIp>
            <EventType>WebshellQuaraEventType</EventType>
            <Ip>47.XX.XX.131</Ip>
            <EventName>WEBSHELL</EventName>
            <Id>3920516</Id>
            <Tag>228f890e56eae9eec6a42c7ea801b538</Tag>
            <Md5>5ddebe926acc7ed39a664409bfd0ec10</Md5>
      </QuaraFiles>
      <Count>1</Count>
</DescribeSuspEventQuaraFilesResponse>

JSON format 

{
	"TotalCount": "20",
	"RequestId": "6AD0BA1B-0129-498F-B82A-17C7B8368A08",
	"PageSize": "20",
	"CurrentPage": "1",
	"QuaraFiles": [{
		"Path": "/var/www/html/webshell-sample-master/others/defc3e21bab59e2a2ab49f7eda99f65f83d4d349.jpg",
		"InstanceName": "abc",
		"Status": "rollbackDone",
		"ModifyTime": "2020-06-11 20:37:08",
		"Uuid": "04a0e735-ad32-4835-b635-0458d77b****",
		"InternetIp": "47.XX.XX.131",
		"EventType": "WebshellQuaraEventType",
		"Ip": "47.XX.XX.131",
		"EventName": "WEBSHELL",
		"Id": "3920516",
		"Tag": "228f890e56eae9eec6a42c7ea801b538",
		"Md5": "5ddebe926acc7ed39a664409bfd0ec10"
	}],
	"Count": "1"
}

Error codes

For a list of error codes, visit the API Error Center.