View Visitors
最終更新日：2026-10-28 14:24:35
Reading time: About 6 minutes
Prerequisites: The Flood Shield 2.0 service has been activated, at least one non-website (TCP/UDP) service has been onboarded, and it has received traffic.
Visitors lets you view the number of visitor IPs for your non-website services and their region distribution, helping you understand where traffic comes from and identify abnormal access.
- IP: View the total count, peak, and trend of visitor IPs, with support for comparing against another time period.
- Region Distribution: View the geographic origin of visitor IPs, along with the request success rate for each region.
This page is under Non-Web Analysis and only covers TCP/UDP services onboarded through port forwarding. For visitor data of HTTP/HTTPS website services, go to Web Analysis > Visitors.
Path: Non-Web Analysis > Visitors
Filter the Data
- Log in to the CDNetworks console, find the Flood Shield 2.0 service you are using under Subscribed Products, and click to enter it.
- Go to Non-Web Analysis > Visitors.
- Set the following filters:
| Filter | Description |
|---|---|
| Time Range | The time period to query |
| Control Group | Filter by control group, so you can view data separately when you run multiple services |
| Domain | Select multiple domains, or select all to view data across every domain |
- Select the IP or Region Distribution tab.
IP
The IP tab shows the number of visitor IPs that accessed the selected domain within the query period, including a trend chart, the total IP count, and the IP peak.
The data granularity changes with the length of the query period:
| Query Period | Data Granularity | Aggregation Rule |
|---|---|---|
| Less than 1 day | 1 hour | If the same IP accesses the service multiple times within an hour, it is counted only once; the data point is recorded at the end of that hour — for example, data for 00:00–01:00 is recorded at 01:00 |
| More than 1 day | 1 day | If the same IP accesses the service multiple times within a day, it is counted only once |
When the query period is less than 1 day, the value at each point in time represents the number of deduplicated IPs within that hour, not an instantaneous concurrency count.
Select the Compare checkbox, choose the period you want to compare against, and then click Query. The chart then shows the visitor IP volume for both periods at once.
When comparing, use periods of the same length (for example, yesterday vs. the same day last week); otherwise, differences in period length will be mixed into the curve comparison.
Region Distribution
The Region Distribution tab shows the geographic distribution of visitors to the selected domain within the query period. Region is determined by the visitor’s IP location.
| Metric | Description |
|---|---|
| Successful Requests | Requests with a status code in the range [100, 399] |
| Failed Requests | Requests with a status code outside the range [100, 399] |
| Success Rate | Successful requests ÷ total requests |
If one region’s success rate is markedly lower than others, go to Non-Web Analysis > Top Rankings and check that region’s visitor IPs on the Visitor tab, to confirm whether this is caused by a concentrated attack or abnormal access.
Next Steps
- → View Usage Statistics — Compare changes in visitor volume against bandwidth and concurrency trends, to determine whether growth comes from business or attack
- → View Top Rankings — Pinpoint the visitor IPs with the highest access volume