Jump to content

how do you read PHPIDS logs?


megetron

Recommended Posts

hello,

I am trying to read logs of PHPIDS logs:

"27.116.15.205",2012-04-27T15:48:40-04:00,142,"xss csrf id rfe lfi sqli","REQUEST.S1%3D%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%253C%2521--%2520START%2520sd%2520-%2520%25D7%25AA%25D7%2595%25D7%259B%25D7%25A0%25D7%2599%25D7%25AA%2520%25D7%25A9%25D7%2595%25D7%25AA%25D7%25A4%25D7%2599%25D7%259D%2520CODE%2520--%253E%250D%250A%253Cscript%2520language%253D%255C%2527javascript%255C%2527%2520%2520type%253D%255C%2527text%252Fjavascript%255C%2527%253E%250D%250Avar%2520r%253Ddocument.referrer%253B%250D%250A%2520var%2520counter%2520%253D%2520new%2520Object%2528%2529%253B%250D%250Acounter.src%2520%253D%2520%255C%2527http%253A%252F%252Fdf.co.il%252Ft.php%253Faid%253D99%2526linkid%253DB74%2526r%253D%255C%2527%252Br%253B%250D%250A%253C%252Fscript%253E%253Cscript%2520src%253Dhttp%253A%252F%252Faf.co.il%252Ft.php%253Faid%253D99%2526linkid%253DB74%253E%250D%250A%253C%252Fscript%253E%250D%250A%253C%2521--%2520END%2520dsf%2520-%2520%25D7%25AA%25D7%2595%25D7%259B%25D7%25A0%25D7%2599%25D7%25AA%2520%25D7%25A9%25D7%2595%25D7%25AA%25D7%25A4%25D7%2599%25D7%259D%2520CODE%2520--%253E%250D%250A%250D%250A%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520+POST.S1%3D%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%253C%2521--%2520START%2520af%2520-%2520%25D7%25AA%25D7%2595%25D7%259B%25D7%25A0%25D7%2599%25D7%25AA%2520%25D7%25A9%25D7%2595%25D7%25AA%25D7%25A4%25D7%2599%25D7%259D%2520CODE%2520--%253E%250D%250A%253Cscript%2520language%253D%255C%2527javascript%255C%2527%2520%2520type%253D%255C%2527text%252Fjavascript%255C%2527%253E%250D%250Avar%2520r%253Ddocument.referrer%253B%250D%250A%2520var%2520counter%2520%253D%2520new%2520Object%2528%2529%253B%250D%250Acounter.src%2520%253D%2520%255C%2527http%253A%252F%252Fdf.co.il%252Ft.php%253Faid%253D99%2526linkid%253DB74%2526r%253D%255C%2527%252Br%253B%250D%250A%253C%252Fscript%253E%253Cscript%2520src%253Dhttp%253A%252F%252Fdf.co.il%252Ft.php%253Faid%253D99%2526linkid%253DB74%253E%250D%250A%253C%252Fscript%253E%250D%250A%253C%2521--%2520END%2520df%2520-%2520%25D7%25AA%25D7%2595%25D7%259B%25D7%25A0%25D7%2599%25D7%25AA%2520%25D7%25A9%25D7%2595%25D7%25AA%25D7%25A4%25D7%2599%25D7%259D%2520CODE%2520--%253E%250D%250A%250D%250A%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520%2520","%2Fa%2Findex.php%3FAct%3Dgetbanner","232.1.201.16"
"293.21.209.2",2012-04-27T16:25:08-04:00,22,"xss csrf id rfe lfi","REQUEST.__utmz%3D69327680.1335558235.1.1.utmcsr%253Da.com%257Cutmccn%253D%2528referral%2529%257Cutmcmd%253Dreferral%257Cutmcct%253D%252FCategory.aspx+COOKIE.__utmz%3D69327680.1335558235.1.1.utmcsr%253Da.com%257Cutmccn%253D%2528referral%2529%257Cutmcmd%253Dreferral%257Cutmcct%253D%252FCategory.aspx","%2Fa%2Frcode.php%3Fid%3D135%26af1d%3D55%26width%3D180%26height%3D150","212.1.218.1"

how can I do this?

Link to comment
https://forums.phpfreaks.com/topic/261739-how-do-you-read-phpids-logs/
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.