Updated on 2024-12-03 GMT+08:00

Web Security Overview

On the Web Security Overview page, you can view the protection logs of all protected websites or instances for a specified time range, including yesterday, today, past 3 days, past 7 days, or past 30 days. On this page, event logs are displayed by different dimensions, including the number of attack types, top 10 attacked domain names, top 10 attack source IP addresses, top 10 attacked URLs, top 10 attack source locations, and top 10 error pages.

Statistics on the Web Security Overview page are updated every minute.

Prerequisites

  • A domain name has been added and connected. For details, see Adding a Website to EdgeSec.
  • At least one protection rule has been configured for the domain name.

Specification Limitations

On the Web Security Overview page, protection data of a maximum of 30 days can be viewed.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Content Delivery & Edge Computing > CDN and Security.
  3. In the navigation pane on the left, choose Dashboard under Edge Security.
  4. In the upper part of the page, specify the domain, website, and time period you want to query.

    • Domain Names: shows information about website domain names added to the EdgeSec instance in the selected enterprise project. Click View to go to the Website Settings page and view details about domain names of protected websites.
    • All protected websites: By default, the information about all websites you add to EdgeSec in all enterprise projects are displayed.
    • Query time: You can select Yesterday, Today, Past 3 days, Past 7 days, or Past 30 days.
      Figure 1 Setting search criteria

  5. View how many attacks and pages under each type of attacks.

    • Attacks: shows how many times the website are attacked.

      An alarm is generated when the number of attacks on a single domain name reaches 100,000 within 5 minutes. You can click Message Center button in the upper right corner of the console and choose My Messages > All Messages to view detailed alarm information on the O&M tab page.

    • You can view how many requests are attacked by a certain type of attacks within a certain period of time.
    Figure 2 Protection action statistics

  6. Query security data.

    Figure 3 Web security event statistics
    Table 1 Web security event statistics parameters

    Parameter

    Description

    Event Distribution

    Types of attack events.

    Click an area in the Event Distribution area to view the type, number, and proportion of an attack.

    Top 10 Attacked Domain Names

    The ten most attacked domain names and the number of attacks on each domain name.

    Click View More to go to the Events page and view more protection data.

    Top 10 Attack Source IP Addresses

    The ten source IP addresses with the most attacks and the number of attacks from each source IP address.

    Click View More to go to the Events page and view more protection data.

    Top 10 Attacked URLs

    The ten most attacked URLs and the number of attacks on each URL.

    Click View More to go to the Events page and view more protection data.