Firewall Log IP

  • Resolved suresh b

    (@suneth2)


    5 years, 12 months ago

    instead of user ip Ninja Firewall only shows my site ip, in all logs it shows server ip. is there any reason to show server ip instead of attacker ip

    12/Jun/20 23:32:59 #8131765 INFO – 138.xx.xxx.xxx GET /index.php – Sanitising user input – [HTTP_REFERER: http://138.xx.xxx.xxx:80/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>] –
    12/Jun/20 23:33:55 #7081915 INFO – 138.xx.xxx.xxx GET /index.php – Sanitising user input – [HTTP_REFERER: http://138.xx.xxx.xxx:80/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP] –
    13/Jun/20 01:12:28 #8870003 INFO – 138.xx.xxx.xxx GET /index.php – Sanitising user input – [HTTP_REFERER: http://138.xx.xxx.xxx/TP/public/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1] –
    13/Jun/20 06:23:24 #4587808 MEDIUM 306 138.xx.xxx.xxx GET /index.php – Bogus user-agent signature – [SERVER:HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)] –
    13/Jun/20 06:23:26 #2214089 MEDIUM 306 138.xx..xxx.xxx GET /index.php – Bogus user-agent signature – [SERVER:HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)] –
    13/Jun/20 06:23:29 #3267190 MEDIUM 306 138.xx..xxx.xxx GET /index.php – Bogus user-agent signature – [SERVER:HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)] –

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘Firewall Log IP’ is closed to new replies.