Help Center/ Edge Security/ API Reference/ API/ Security Overview/ Querying Attack Domain Names

Updated on 2024-11-18 GMT+08:00

View PDF

Querying Attack Domain Names

Function

This API is used to query top security information, including the attack domain name, attack source IP address, attack URL, attack source region, and protection type.

URI

GET /v1/edgesec/stat/http/overviews/classification

**Table 1** Query Parameters
Parameter	Mandatory	Type	Description
enterprise_project_id	No	String	Obtain the enterprise project ID by calling the ListEnterpriseProject API of Enterprise Project Management Service (EPS). The default value is 0.
from	Yes	Long	Start time
to	Yes	Long	End time
top	No	Integer	The first several results to query
domain_name	No	String	Domain name.

Request Parameters

**Table 2** Request header parameters
Parameter	Mandatory	Type	Description
X-Auth-Token	Yes	String	Tenant token

Response Parameters

Status code: 200

**Table 3** Response body parameters
Parameter	Type	Description
domain	DomainClassificationItem object	-
attack_type	AttackTypeClassificationItem object	-
ip	IpClassificationItem object	-
url	UrlClassificationItem object	-
geo	GeoClassificationItem object	-

**Table 4** DomainClassificationItem
Parameter	Type	Description
total	Integer	Total number of DomainItem
items	Array of DomainItem objects	DomainItem details

**Table 5** DomainItem
Parameter	Type	Description
key	String	Domain name.
num	Integer	Quantity
web_tag	String	Website name.

**Table 6** AttackTypeClassificationItem
Parameter	Type	Description
total	Integer	Total number of AttackTypeItem
items	Array of AttackTypeItem objects	AttackTypeItem details

**Table 7** AttackTypeItem
Parameter	Type	Description
key	String	Attack type.
num	Integer	Quantity

**Table 8** IpClassificationItem
Parameter	Type	Description
total	Integer	Total number of IpItem
items	Array of IpItem objects	IpItem details

**Table 9** IpItem
Parameter	Type	Description
key	String	IP address
num	Integer	Quantity

**Table 10** UrlClassificationItem
Parameter	Type	Description
total	Integer	Total number of UrlItem
items	Array of UrlItem objects	UrlItem details

**Table 11** UrlItem
Parameter	Type	Description
key	String	URL path
num	Integer	Quantity
host	String	Domain name.

**Table 12** GeoClassificationItem
Parameter	Type	Description
total	Integer	Total number of GeoItem
items	Array of GeoItem objects	GeoItem details

**Table 13** GeoItem
Parameter	Type	Description
key	String	Attack source location.
num	Integer	Quantity

Status code: 400

**Table 14** Response body parameters
Parameter	Type	Description
error_code	String	Standard error code: service name.8-digit code
error_msg	String	Detailed error information.
encoded_authorization_message	String	If the service is integrated with IAM5.0, an IAM response must be returned when access is denied.

Status code: 401

**Table 15** Response body parameters
Parameter	Type	Description
error_code	String	Standard error code: service name.8-digit code
error_msg	String	Detailed error information.
encoded_authorization_message	String	If the service is integrated with IAM5.0, an IAM response must be returned when access is denied.

Status code: 500

**Table 16** Response body parameters
Parameter	Type	Description
error_code	String	Standard error code: service name.8-digit code
error_msg	String	Detailed error information.
encoded_authorization_message	String	If the service is integrated with IAM5.0, an IAM response must be returned when access is denied.