#!/bin/bash
username="example_username"
# Note that this must be a single quote to avoid the special $ character
apiKey='example_apiKey'
date=`env LANG="en_US.UTF-8" date -u "+%a, %d %b %Y %H:%M:%S GMT"`
password=`echo -en "$date" | openssl dgst -sha1 -hmac $apiKey -binary | openssl enc -base64`

curl -i --url "https://open.chinanetcenter.com/api/waf/report/query-attack-event-list" \
-X "POST" \
-u "$username:$password" \
-H "Date: $date" \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
-d '{ 
  "domains": [ "example.xxx.xxx"], 
  "endTime": "2021-09-23 00:00:00", 
  "startTime": "2021-09-22 00:00:00" 
}'

{
  "code": "0",
  "message": "Success",
  "data": {
    "attackEventList": [
      {
        "attackCount": 11647,
        "startTime": "2021-09-22 11:28:42",
        "endTime": "2021-09-22 16:09:21",
        "attackType": "WAF_FORCE_CRACKING",
        "customId": "xxx",
        "ip": "10.8.135.149",
        "attackEventType": "highFrequencyAttack",
        "attackTypeNameEn": "Rate Limiting",
        "attackTypeName": "Rate Limiting",
        "eventNameEn": "10.8.135.149 IP launch Brute Force attacks.",
        "eventName": "10.8.135.149 IP launch Brute Force attacks."
      }
    ],
    "totalCount": 1
  }
}