{
    "scheme": "http",
    "src_ip": "100.85.61.127",
    "src_port": 49727,
    "socket_ip": "100.85.61.127",
    "upstream_addr": "100.82.234.54",
    "req_start_time": 1783591163244,
    "rsp_start_time": null,
    "req_end_time": 1783591163244,
    "rsp_end_time": null,
    "host": "attt-server.taila3bb13.ts.net",
    "method": "GET",
    "query_string": "",
    "event_id": "b43b0bb5a75f4f51811177c4710941d4",
    "session": "",
    "site_uuid": "1",
    "site_url": "http://attt-server.taila3bb13.ts.net",
    "ja4_fingerprint": "",
    "policy_rule_hit_name": "allow tracking logs -block",
    "req_detector_name": "b9043ddc9cc8",
    "req_detect_time": 88,
    "req_proxy_name": "attt-server",
    "req_rule_id": "/allow tracking logs -block",
    "req_location": "",
    "req_payload": "",
    "req_decode_path": "",
    "req_rule_module": "",
    "req_http_body_is_truncate": 0,
    "rsp_http_body_is_truncate": 0,
    "http_body_is_abandoned": 0,
    "country": "B1",
    "province": "",
    "city": "",
    "lat": "",
    "lng": "",
    "timestamp": 1783591163,
    "payload": "",
    "location": "",
    "rule_id": "/allow tracking logs -block",
    "decode_path": "",
    "cookie": "sl-session=05KXGf9TUGpS0Vgna16MHQ==; HLO_SESSION=s%3As-30fqEdhbjpti_SgSiKlZwfGmYQkzFH.ly3yGeR30o%2FV16mYSAvAP910ftTa8ZAGE6T6zk9yCQc",
    "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0",
    "referer": "",
    "timestamp_human": "2026-07-09 09:59:23",
    "resp_reason_phrase": "",
    "module": "",
    "reason": "",
    "proxy_name": "attt-server",
    "node": "b9043ddc9cc8",
    "dest_port": 80,
    "dest_ip": "100.82.234.54",
    "urlpath": "/",
    "protocol": "http",
    "attack_type": "unknown",
    "risk_level": "none",
    "action": "deny",
    "req_header_raw": "GET / HTTP/1.1\r\nHost: attt-server.taila3bb13.ts.net\r\nConnection: keep-alive\r\nCache-Control: max-age=0\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-US,en;q=0.9,vi;q=0.8\r\nCookie: sl-session=05KXGf9TUGpS0Vgna16MHQ==; HLO_SESSION=s%3As-30fqEdhbjpti_SgSiKlZwfGmYQkzFH.ly3yGeR30o%2FV16mYSAvAP910ftTa8ZAGE6T6zk9yCQc\r\n\r\n",
    "req_attack_type": "unknown",
    "req_risk_level": "none",
    "req_action": "deny"
}