Hi, a lot of errors on server. What do I have to do to get rid of them? A Million errors like [INTERFACE]: PHP IDS Alert.Total impact: 92<br/> Affected tags: xss, csrf, id, rfe, sqli, lfi<br/> <br/> Variable: COOKIE.FCCDCF | Value: [null,null,null,["CP8PC0AP8PC0AEsACBSLAtEoAP_gAEPgACRAINJD7D7FbSFCwH5zaLsAMAhHRsCAQoQAAASBAmABQAKQIAQCgkAQFASgBAACAAAAICZBIQIECAAACUAAQAAAAAAEAAAAAAAIIAAAgAEAAAAIAAACAAAAEAAIAAAAEAAAmAgAAIIACAAAhAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAQOhQD2F2K2kKFkPCmQWYAQBCijYEAhQAAAAkCBIAAgAUgQAgFIIAgAIFAAAAAAAAAQEgCQAAQABAAAIACgAAAAAAIAAAAAAAQQAAAAAIAAAAAAAAEAAAAAAAQAAAAIAABEhCAAQQAEAAAAAAAQAAAAAAAAAAABAAA","2~2072.70.89.93.108.122.149.196.2253.2299.259.2357.311.313.323.2373.338.358.2415.415.449.2506.2526.486.494.495.2568.2571.2575.540.574.2624.609.2677.864.981.1029.1048.1051.1095.1097.1126.1205.1211.1276.1301.1365.1415.1423.1449.1570.1577.1598.1651.1716.1735.1753.1765.1870.1878.1889.1958~dv.","44FF1ED8-FA55-48CE-BA24-6C0D383B3E30"]]<br/> Impact: 33 | Tags: xss, csrf, id, rfe, sqli, lfi<br/> Description: Detects self-executing JavaScript functions | Tags: xss, csrf | ID 8<br/> Description: Detects common XSS concatenation patterns 1/2 | Tags: xss, csrf, id, rfe | ID 30<br/> Description: Detects classic SQL injection probings 1/2 | Tags: sqli, id, lfi | ID 42<br/> Description: Detects classic SQL injection probings 2/2 | Tags: sqli, id, lfi | ID 43<br/> Description: Detects MySQL comment-/space-obfuscated injections and backtick termination | Tags: sqli, id | ID 57<br/> Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID 67<br/> <br/> Variable: COOKIE.__gads | Value: ID=3479f6d73c6e4cf7:T=1711718748:RT=1711718748:S=ALNI_MZjahd-ExFNvDThwEtVH03PSaaTew<br/> Impact: 10 | Tags: xss, csrf, rfe<br/> Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID 23<br/> Description: Detects data: URL injections, VBS injections and common URI schemes | Tags: xss, rfe | ID 27<br/> <br/> Variable: COOKIE.__gpi | Value: UID=00000d859595308a:T=1711718748:RT=1711718748:S=ALNI_MYyvAp3IqtubT8V8x7RXYkNxkoTpQ<br/> Impact: 10 | Tags: xss, csrf, rfe<br/> Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID 23<br/> Description: Detects data: URL injections, VBS injections and common URI schemes | Tags: xss, rfe | ID 27<br/> <br/> Variable: COOKIE.__eoi | Value: ID=e8aacfcd47e8f214:T=1711718748:RT=1711718748:S=AA-Afjb6yb7Xp9EgHTbTup3QDMqe<br/> Impact: 10 | Tags: xss, csrf, rfe<br/> Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID 23<br/> Description: Detects data: URL injections, VBS injections and common URI schemes | Tags: xss, rfe | ID 27<br/> <br/> Variable: COOKIE.FCNEC | Value: [["AKsRol9GKfkmqDNqzaA3DRx-RSVb5u5W6s3mk1foiUQ04fSvGUdak5lR_dU_sgzhqLjJH8455Rt7IQBHYTpgl8dIE7aHXjYHzqS0C9pxvgPtgzXQMCT0hH7mVQu7TBXY43fCiLoRzXQUEFYbOZyfs_hXWNIeX_agAA=="]]<br/> Impact: 29 | Tags: xss, csrf, id, rfe, sqli, lfi<br/> Description: Detects self-executing JavaScript functions | Tags: xss, csrf | ID 8<br/> Description: Detects common XSS concatenation patterns 2/2 | Tags: xss, csrf, id, rfe | ID 31<br/> Description: Detects classic SQL injection probings 2/2 | Tags: sqli, id, lfi | ID 43<br/> Description: Detects basic SQL authentication bypass attempts 3/3 | Tags: sqli, id, lfi | ID 46<br/> Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID 67<br/> <br/>
The log gets cleaned up automatically, no need for any manual actions. And please look at your screenshot, there is a big red button to remove all errors.
These messages are from the intrusion detection system, which informs you that someone sent suspect cookie contents to ISPConfig, which the IDS successfully blocked. See also: https://forum.howtoforge.com/thread...k-detected-this-action-has-been-logged.78605/
Ok thank you. But I can't clean these errors to the bottom. I clicked a lot of times on these two red buttons and errors are still there. How to clean them completely?
Ok, I see. Please just tell me what is the log path that I can delete thing manually. When will auto clean-up happen? Does this happen once a month?
