16399 - LOGID_ATTACK_MALICIOUS_URL
Message ID: 16399
Message Description: LOGID_ATTACK_MALICIOUS_URL
Message Meaning: Attack detected by a malicious URL
Type: IPS
Category: MALICIOUS-URL
Severity: Alert
|
Log Field Name |
Description |
Data Type |
Length |
|---|---|---|---|
|
action |
string |
16 |
|
|
attack |
string |
256 |
|
|
attackcontext |
string |
2040 |
|
|
attackcontextid |
string |
10 |
|
|
attackid |
uint32 |
10 |
|
|
crlevel |
string |
10 |
|
|
crscore |
uint32 |
10 |
|
|
date |
string |
10 |
|
|
direction |
string |
8 |
|
|
dstintf |
string |
64 |
|
|
dstintfrole |
string |
10 |
|
|
dstip |
ip |
39 |
|
|
eventtime |
uint64 |
20 |
|
|
eventtype |
string |
32 |
|
|
forwardedfor |
string |
128 |
|
|
group |
string |
64 |
|
|
hostname |
string |
256 |
|
|
incidentserialno |
uint32 |
10 |
|
|
level |
string |
11 |
|
|
logid |
string |
10 |
|
|
msg |
string |
518 |
|
|
policyid |
uint32 |
10 |
|
|
profile |
string |
64 |
|
|
proto |
uint8 |
3 |
|
|
rawdata |
string |
20480 |
|
|
rawdataid |
string |
10 |
|
|
ref |
string |
||
|
service |
string |
36 |
|
|
sessionid |
uint32 |
10 |
|
|
severity |
string |
8 |
|
|
srcintf |
string |
64 |
|
|
srcintfrole |
string |
10 |
|
|
srcip |
ip |
39 |
|
|
subtype |
string |
20 |
|
|
time |
string |
8 |
|
|
trueclntip |
ip |
39 |
|
|
type |
string |
16 |
|
|
url |
string |
512 |
|
|
user |
string |
256 |
|
|
vd |
string |
32 |
|
|
vrf |
uint8 |
3 |