authority servers has reverse zone file

blocked request
blocked malware
blocked bot request

log and deny rule is configured.

reports are configured.
75mb files for 1 week are logged

botnet files was not updated since feb 2019

fraud feed
malware feed

how to make differentiation between botnet/fraud/malware from log file.

multiple options are availabe for DROP/FORWARD/MESSAGE etc to be done on each

request.

configured reports
volume of logs
volume of requests blocked by malware/botnet/fraud