2.9.4. host_unblacklisted (ID: 04600004)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
2.9.5. host_blacklisted (ID: 04600006)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
NOTICE
Blacklist entry removed. Protocol: <proto>, IP: <ip>, Port: <port>.
A blacklist entry has been removed.
None
None.
3
proto
ip
port
NOTICE
Blacklist entry added . Protocol: <proto>, IP: <ip>, Port: <port>.
A blacklist entry was added.
None
Investigate threshold or IntrusionDetection rules that could have
triggered dynamic blacklisting.
3
proto
ip
port
207
Chapter 2: Log Message Reference