DNS DDoS Attacks¶
Overview¶
This BIG-IQ API can get the summary data of an ongoing DNS DDoS attacks.
Requests¶
Examples¶
GET to retrieve a single DNS attack summary¶
Following is an example of a response to the API call for an attack of a specified ID
GET https://<BIG-IQ>/mgmt/ap/query/v1/tenants/default/reports/DnsCorrelatedAttackDetailsSummary?$id=DNS_dnsLicener1_dnsProfile_19%2F02%2F26,14:04
Response¶
{
"kind": "ap:compose:Report",
"lastUpdateMicros": 1653853309670,
"result": {
"id": "DNS_dnsLicener1_dnsProfile_19/02/26,14:04",
"alertsHistory": [{
"id": "|þf/C£\b3",
"title": "Attack detected on Tier1-Stav_StaitcIP-75.sample.com: ID 1796498891",
"timestamp": 1551182642370,
"severity": "Critical"
}],
"severity": "Critical",
"protectedObject": "/Common/dnsLicener1",
"dosProfile": "/Common/dnsProfile",
"attackVector": "DNS A Query",
"attackVectorId": "a",
"mitigation": "Blocked",
"trigger": "Volumetric, Aggregated across all SrcIP's, VS-Specific attack, metric:PPS",
"protocol": "DNS",
"startTime": 1551182642370,
"duration": 1466936,
"status": "Active",
"allTransactionsTs": [{
"timeMillis": 1551180600000,
"allTransactions": 0.0
}, {
"timeMillis": 1551180900000,
"allTransactions": 0.0
}, {
"timeMillis": 1551181200000,
"allTransactions": 0.0
}, {
"timeMillis": 1551181500000,
"allTransactions": 0.0
}, {
"timeMillis": 1551181800000,
"allTransactions": 0.0
}, {
"timeMillis": 1551182100000,
"allTransactions": 0.0
}, {
"timeMillis": 1551182400000,
"allTransactions": 0.0
}, {
"timeMillis": 1551182700000,
"allTransactions": 0.0
}, {
"timeMillis": 1551183000000,
"allTransactions": 0.0
}, {
"timeMillis": 1551183300000,
"allTransactions": 0.0
}, {
"timeMillis": 1551183600000,
"allTransactions": 0.0
}, {
"timeMillis": 1551183900000,
"allTransactions": 0.0
}, {
"timeMillis": 1551184050000,
"allTransactions": 0.0
}],
"incompleteTransactionsTs": [],
"blockedTransactionsTs": [{
"timeMillis": 1551180600000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551180900000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551181200000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551181500000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551181800000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551182100000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551182400000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551182700000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551183000000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551183300000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551183600000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551183900000,
"blockedTransactions": 0.0
}, {
"timeMillis": 1551184050000,
"blockedTransactions": 0.0
}],
"currAllTransactions": 0.0,
"currIncompleteTransactions": 0.0,
"currBlockedTransactions": 0.0
},
"requestDurationInMillis": 3190
}