Fortinet black logo

Log Message Reference

20000006

20000006

Meaning

IP in block list was blocked.

Field name Description

log_id

20000006

See Log ID numbers.

main_type

Black IP List

subtype

N/A

Examples

date=2022-07-30 time=18:33:03 log_id=20000006 msg_id=000003690359 device_id=FVVM04TM22000797 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="Black IP List" sub_type="N/A" trigger_policy="N/A" severity_level=Medium proto=tcp service=http backend_service=tcp action=Alert_Deny policy="port1-1-vip" src=44.1.254.5 src_port=10000 dst=44.1.0.2 dst_port=80 http_method=none http_url="none" http_host="none" http_agent="none" http_session_id=none msg="IP in black list was blocked" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="United States" content_switch_name="none" server_pool_name="none" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="Unknown" dev_id="F11DE82FC4938D4110528102E0821F043A19" es=0 threat_weight=500 history_threat_weight=500 threat_level=Critical ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="N/A" bot_info="none" client_level="Malicious" x509_cert_subject="none" owasp_api_top10="N/A"

20000006

Meaning

IP in block list was blocked.

Field name Description

log_id

20000006

See Log ID numbers.

main_type

Black IP List

subtype

N/A

Examples

date=2022-07-30 time=18:33:03 log_id=20000006 msg_id=000003690359 device_id=FVVM04TM22000797 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="Black IP List" sub_type="N/A" trigger_policy="N/A" severity_level=Medium proto=tcp service=http backend_service=tcp action=Alert_Deny policy="port1-1-vip" src=44.1.254.5 src_port=10000 dst=44.1.0.2 dst_port=80 http_method=none http_url="none" http_host="none" http_agent="none" http_session_id=none msg="IP in black list was blocked" signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="United States" content_switch_name="none" server_pool_name="none" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="Unknown" dev_id="F11DE82FC4938D4110528102E0821F043A19" es=0 threat_weight=500 history_threat_weight=500 threat_level=Critical ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="none" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="N/A" bot_info="none" client_level="Malicious" x509_cert_subject="none" owasp_api_top10="N/A"