<185>Jan 21 00:59:43 WAFirewall CEF:0|Barracuda|WAF|1200|342|GEO_IP_BLOCK|1|cat=WF dst=104.137.39.31 dpt=443 act=DENY msg=[Known Http Attack Source] duser="-" src=240.125.195.231 spt=61522 requestMethod=GET app=TLSv1.2 requestContext="-" start=Jan 21 2023 00:59:43  rt=1674284383721  request=/ requestClientApplication="Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers&#39; presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloal" dvchost=WAFirewall externalId=185d3203ddc-d6b92464 cn2=61522 cn2Label=ProxyPort cs1=global cs1Label=RuleID cs2=NONE cs2Label=FollowUpAction cs3=GLOBAL cs3Label=RuleType cs4=Forceful Browsing cs4Label=AttackGroup cs5=240.125.195.231 cs5Label=ProxyIP cs6="-" cs6Label=SessionID 

Product: Barracuda WAF
Vendor: Barracuda