Firewall Log Question

Hi,

Still quite new to using this plugin but really liking what I see so far, great job 🙂

Just a quick question about the firewall log when I see stuff like this:

HIGH – 120.27.35.11 GET /index.php – User enumeration scan (author archives) – [author=1]
CRITICAL 1515 5.61.34.246 GET /index.php – Unauthorized action – [GET:up_auto_log = true]

Is NinjaFirewall blocking these or just logging it?

Thanks
Pete