20000052
| Meaning | |
|---|---|
|
Client Management violation. |
| Field name | Description |
|
|
20000052 See Log ID numbers. |
|
|
Client Management |
|
|
N/A |
| Examples | |
|---|---|
|
date=2022-07-05 time=16:54:11 log_id=20000052 msg_id=000001005386 device_id=FVVM04TM21000545 vd="root" timezone="(GMT+1:00)Brussels,Copenhagen,Madrid,Paris" timezone_dayst="GMTc-2" type=attack pri=alert main_type="Client Management" sub_type="N/A" trigger_policy="N/A" severity_level=Low proto=tcp service=http backend_service=unknown action=Period_Block policy="port1-HPC" src=44.1.28.1 src_port=10031 dst=10.20.128.42 dst_port=80 http_method=post http_url="/index.php" http_host="44.1.0.28" http_agent="Firefox/62.0" http_session_id=none msg="IP 44.1.28.1 has been period blocked for 1 minute(s) because of exceeded threat score limit." signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="United States" content_switch_name="none" server_pool_name="128" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="1.x" dev_id="511852CB0D52A82F2BFB255587FD2DF7D9CB" es=0 threat_weight=0 history_threat_weight=1996 threat_level=Off ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="N/A" bot_info="none" client_level="Malicious" x509_cert_subject="none" owasp_api_top10="N/A" |