From 76f67d661079502a627ae613e5b740a9755c8c4b Mon Sep 17 00:00:00 2001 From: Jose Angel Sanchez Velazquez Date: Thu, 17 Jul 2025 15:23:33 +0100 Subject: [PATCH] increase blocklist for maliciuos ip alert --- correlation/ti/ti.go | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/correlation/ti/ti.go b/correlation/ti/ti.go index e1ca56823..3ebaf50b5 100644 --- a/correlation/ti/ti.go +++ b/correlation/ti/ti.go @@ -1,13 +1,14 @@ package ti import ( - "github.com/tidwall/gjson" - "github.com/utmstack/UTMStack/correlation/correlation" - "github.com/utmstack/UTMStack/correlation/utils" "runtime" "strings" "sync" "time" + + "github.com/tidwall/gjson" + "github.com/utmstack/UTMStack/correlation/correlation" + "github.com/utmstack/UTMStack/correlation/utils" ) type Cache map[string]bool @@ -34,6 +35,8 @@ func blocked(log string) bool { "drop", "reject", "deny", + "timeout", + "closed", } for _, e := range exclusionList {