| IP | Hændelser |
|---|---|
198.51.100.35 | 4 |
198.51.100.15 | 4 |
198.51.100.31 | 4 |
198.51.100.32 | 3 |
198.51.100.30 | 2 |
198.51.100.12 | 2 |
198.51.100.22 | 2 |
198.51.100.23 | 2 |
198.51.100.14 | 2 |
198.51.100.17 | 2 |
| URI | Hændelser |
|---|---|
/api/v1/login | 9 |
/xmlrpc.php | 8 |
/wp-login.php | 6 |
/index.php?id=1 | 6 |
/?q=../../etc/passwd | 5 |
/admin/ | 5 |
/.env | 2 |
| Regel-ID | Udløsninger |
|---|---|
913100Security scanner — User-Agent |
11 |
941100XSS via libinjection |
11 |
930100Path Traversal (/../) |
8 |
932100RCE — Unix commands |
7 |
942100SQL Injection via libinjection |
4 |
| Tid | IP | URI | Type | Regel | Handling |
|---|---|---|---|---|---|
| 2026-10-12 10:27:47 | 198.51.100.30 |
/api/v1/login |
RCE | 932100 RCE — Unix commands |
Blokeret |
| 2026-10-12 10:06:51 | 198.51.100.28 |
/api/v1/login |
Protocol Attack | 930100 Path Traversal (/../) |
Registreret |
| 2026-10-12 09:52:23 | 198.51.100.12 |
/api/v1/login |
XSS | 932100 RCE — Unix commands |
Blokeret |
| 2026-10-12 09:07:11 | 198.51.100.22 |
/api/v1/login |
LFI/Path Traversal | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 09:46:55 | 198.51.100.23 |
/?q=../../etc/passwd |
LFI/Path Traversal | 941100 XSS via libinjection |
Blokeret |
| 2026-10-12 10:11:07 | 198.51.100.30 |
/admin/ |
Scanner | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 08:47:41 | 198.51.100.32 |
/?q=../../etc/passwd |
SQL Injection | 932100 RCE — Unix commands |
Registreret |
| 2026-10-12 09:11:50 | 198.51.100.35 |
/wp-login.php |
Scanner | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 08:20:19 | 198.51.100.14 |
/admin/ |
RCE | 942100 SQL Injection via libinjection |
Registreret |
| 2026-10-12 06:30:56 | 198.51.100.35 |
/xmlrpc.php |
XSS | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 09:08:17 | 198.51.100.21 |
/xmlrpc.php |
Scanner | 930100 Path Traversal (/../) |
Blokeret |
| 2026-10-12 06:25:36 | 198.51.100.32 |
/?q=../../etc/passwd |
RCE | 913100 Security scanner — User-Agent |
Blokeret |
| 2026-10-12 05:13:59 | 198.51.100.15 |
/wp-login.php |
RCE | 930100 Path Traversal (/../) |
Blokeret |
| 2026-10-12 06:26:38 | 198.51.100.31 |
/.env |
LFI/Path Traversal | 932100 RCE — Unix commands |
Blokeret |
| 2026-10-12 03:22:25 | 198.51.100.15 |
/index.php?id=1 |
SQL Injection | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 04:56:02 | 198.51.100.32 |
/xmlrpc.php |
XSS | 930100 Path Traversal (/../) |
Blokeret |
| 2026-10-12 06:12:51 | 198.51.100.17 |
/?q=../../etc/passwd |
RCE | 930100 Path Traversal (/../) |
Registreret |
| 2026-10-12 02:17:03 | 198.51.100.31 |
/api/v1/login |
LFI/Path Traversal | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 01:31:05 | 198.51.100.20 |
/xmlrpc.php |
Protocol Attack | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 07:00:03 | 198.51.100.34 |
/wp-login.php |
Protocol Attack | 913100 Security scanner — User-Agent |
Blokeret |
| 2026-10-12 07:35:47 | 198.51.100.12 |
/wp-login.php |
RCE | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 07:17:02 | 198.51.100.14 |
/xmlrpc.php |
LFI/Path Traversal | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 06:25:03 | 198.51.100.11 |
/xmlrpc.php |
Protocol Attack | 930100 Path Traversal (/../) |
Blokeret |
| 2026-10-12 03:02:44 | 198.51.100.18 |
/index.php?id=1 |
Scanner | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 01:52:59 | 198.51.100.27 |
/.env |
XSS | 941100 XSS via libinjection |
Registreret |
| 2026-10-11 21:18:12 | 198.51.100.26 |
/api/v1/login |
RCE | 941100 XSS via libinjection |
Blokeret |
| 2026-10-12 01:16:35 | 198.51.100.31 |
/admin/ |
XSS | 930100 Path Traversal (/../) |
Registreret |
| 2026-10-11 23:24:56 | 198.51.100.35 |
/xmlrpc.php |
XSS | 930100 Path Traversal (/../) |
Registreret |
| 2026-10-11 23:44:15 | 198.51.100.23 |
/index.php?id=1 |
Scanner | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-11 22:22:47 | 198.51.100.11 |
/api/v1/login |
Scanner | 932100 RCE — Unix commands |
Registreret |
| 2026-10-12 02:39:47 | 198.51.100.31 |
/xmlrpc.php |
Scanner | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 01:07:43 | 198.51.100.33 |
/wp-login.php |
Scanner | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-12 00:00:03 | 198.51.100.18 |
/index.php?id=1 |
RCE | 942100 SQL Injection via libinjection |
Registreret |
| 2026-10-11 16:41:53 | 198.51.100.15 |
/index.php?id=1 |
Scanner | 942100 SQL Injection via libinjection |
Registreret |
| 2026-10-12 05:36:31 | 198.51.100.35 |
/api/v1/login |
XSS | 942100 SQL Injection via libinjection |
Registreret |
| 2026-10-11 15:01:42 | 198.51.100.15 |
/admin/ |
SQL Injection | 913100 Security scanner — User-Agent |
Registreret |
| 2026-10-11 20:21:11 | 198.51.100.22 |
/wp-login.php |
SQL Injection | 932100 RCE — Unix commands |
Registreret |
| 2026-10-11 21:26:28 | 198.51.100.33 |
/?q=../../etc/passwd |
Scanner | 932100 RCE — Unix commands |
Registreret |
| 2026-10-11 22:57:27 | 198.51.100.16 |
/api/v1/login |
SQL Injection | 941100 XSS via libinjection |
Registreret |
| 2026-10-12 02:10:32 | 198.51.100.17 |
/admin/ |
XSS | 941100 XSS via libinjection |
Blokeret |
| 2026-10-11 12:36:27 | 198.51.100.19 |
/index.php?id=1 |
RCE | 913100 Security scanner — User-Agent |
Registreret |
ModSecurity med OWASP Core Rule Set blokerer overordentlig meget og skriver om næsten alt af det til en revisionslog, hvis format er lavet til maskiner. Denne side gør det til noget læsbart: hvilke forespørgsler der blev blokeret, hvilken regel der udløstes, hvad anomali-scoren var, og hvor forespørgslen kom fra.
Grunden til at kigge her jævnligt er falske positiver. Core Rule Set er bevidst strengt og blokerer på standardniveauet legitim trafik i de fleste virkelige applikationer: filoverførsler, redaktører med formateret tekst og alt, der sender markup eller SQL-lignende strenge, er de sædvanlige ofre. Mønsteret at genkende er det samme regel-ID, der udløses gang på gang mod det samme endepunkt fra mange forskellige adresser. Det er ikke et angreb, det er din egen applikation, der bliver taget.
Hold undtagelsen snæver, når du finder en: udelad netop den regel for netop den parameter på netop den sti, aldrig hele reglen og endnu mindre hele kategorien. Siden viser også det aktive regelsæt, så du efter en ændring kan bekræfte, hvad der faktisk er indlæst.