{
    "scheme": "http",
    "src_ip": "100.85.61.127",
    "src_port": 53650,
    "socket_ip": "100.85.61.127",
    "upstream_addr": "100.82.234.54",
    "req_start_time": 1783588493073,
    "rsp_start_time": 1783588493210,
    "req_end_time": 1783588493073,
    "rsp_end_time": 1783588493210,
    "host": "attt-server.taila3bb13.ts.net",
    "method": "POST",
    "query_string": "",
    "status_code": 200,
    "event_id": "ce6df44aec454c27a63fbc3e2b86c64b",
    "session": "",
    "site_uuid": "1",
    "site_url": "http://attt-server.taila3bb13.ts.net",
    "ja4_fingerprint": "",
    "policy_rule_hit_name": "allow tracking logs",
    "req_detector_name": "b9043ddc9cc8",
    "rsp_detector_name": "b9043ddc9cc8",
    "req_detect_time": 467,
    "rsp_detect_time": 89,
    "req_proxy_name": "attt-server",
    "rsp_proxy_name": "attt-server",
    "req_rule_id": "m_sqli",
    "rsp_rule_id": "/allow tracking logs",
    "req_location": "body",
    "rsp_location": "",
    "req_payload": "\\' OR 1=1 LIMIT 1 --",
    "rsp_payload": "",
    "req_decode_path": "json",
    "rsp_decode_path": "",
    "req_rule_module": "m_sqli",
    "rsp_rule_module": "",
    "req_http_body_is_truncate": 0,
    "rsp_http_body_is_truncate": 0,
    "http_body_is_abandoned": 0,
    "country": "B1",
    "province": "",
    "city": "",
    "lat": "",
    "lng": "",
    "timestamp": 1783588493,
    "payload": "\\' OR 1=1 LIMIT 1 --",
    "location": "body",
    "rule_id": "m_sqli",
    "decode_path": "json",
    "cookie": "",
    "user_agent": "curl/8.5.0",
    "referer": "",
    "timestamp_human": "2026-07-09 09:14:53",
    "resp_reason_phrase": "",
    "module": "m_sqli",
    "reason": "",
    "proxy_name": "attt-server",
    "node": "b9043ddc9cc8",
    "dest_port": 80,
    "dest_ip": "100.82.234.54",
    "urlpath": "/api/auth/login",
    "protocol": "http",
    "attack_type": "unknown",
    "risk_level": "high",
    "action": "allow",
    "req_header_raw": "POST /api/auth/login HTTP/1.1\r\nHost: attt-server.taila3bb13.ts.net\r\nUser-Agent: curl/8.5.0\r\nAccept: */*\r\nContent-Type: application/json\r\nContent-Length: 49\r\n\r\n",
    "req_block_reason": "web",
    "req_attack_type": "unknown",
    "req_risk_level": "high",
    "req_action": "allow",
    "resp_header_raw": "HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Thu, 09 Jul 2026 09:14:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 478\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nETag: W/\"1de-NaVX1qpC6jMJvcStrjpan4ySpaI\"\r\nSet-Cookie: HLO_SESSION=s%3AOabltNR5EguPdHWOBGHa8xNXvnMkeBsK.nrqdMp4d3SS3BrCJR9JpslotVugkPYxGRWa%2FfpL9dxI; Path=/; Expires=Thu, 09 Jul 2026 17:14:53 GMT\r\n\r\n",
    "rsp_attack_type": "unknown",
    "rsp_risk_level": "none",
    "rsp_action": "allow"
}