| IP | Udalosti |
|---|---|
198.51.100.35 | 6 |
198.51.100.13 | 6 |
198.51.100.15 | 5 |
198.51.100.21 | 5 |
198.51.100.33 | 5 |
198.51.100.26 | 4 |
198.51.100.23 | 4 |
198.51.100.18 | 4 |
198.51.100.11 | 4 |
198.51.100.17 | 4 |
| URI | Udalosti |
|---|---|
/.env | 15 |
/?q=../../etc/passwd | 11 |
/admin/ | 10 |
/api/v1/login | 10 |
/xmlrpc.php | 9 |
/index.php?id=1 | 8 |
/wp-login.php | 6 |
| ID pravidla | Aktivácií |
|---|---|
930100Path Traversal (/../) |
18 |
942100SQL Injection via libinjection |
15 |
932100RCE — Unix commands |
13 |
941100XSS via libinjection |
12 |
913100Security scanner — User-Agent |
11 |
| Čas | IP | URI | Typ | Pravidlo | Akcia |
|---|---|---|---|---|---|
| 2026-10-13 08:59:56 | 198.51.100.26 |
/admin/ |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 08:35:40 | 198.51.100.14 |
/api/v1/login |
LFI/Path Traversal | 941100 XSS via libinjection |
Zablokované |
| 2026-10-13 08:16:00 | 198.51.100.28 |
/index.php?id=1 |
RCE | 941100 XSS via libinjection |
Zablokované |
| 2026-10-13 07:55:35 | 198.51.100.15 |
/api/v1/login |
Protocol Attack | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-13 06:50:44 | 198.51.100.23 |
/.env |
RCE | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 06:31:31 | 198.51.100.35 |
/index.php?id=1 |
Scanner | 942100 SQL Injection via libinjection |
Zablokované |
| 2026-10-13 05:55:14 | 198.51.100.15 |
/.env |
Scanner | 932100 RCE — Unix commands |
Zablokované |
| 2026-10-13 06:24:32 | 198.51.100.18 |
/.env |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 07:20:52 | 198.51.100.35 |
/api/v1/login |
XSS | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-13 08:05:38 | 198.51.100.21 |
/admin/ |
Protocol Attack | 913100 Security scanner — User-Agent |
Zablokované |
| 2026-10-13 03:39:36 | 198.51.100.20 |
/wp-login.php |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zistené |
| 2026-10-13 08:16:40 | 198.51.100.35 |
/.env |
XSS | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-13 03:51:56 | 198.51.100.13 |
/xmlrpc.php |
LFI/Path Traversal | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 05:00:18 | 198.51.100.26 |
/?q=../../etc/passwd |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zistené |
| 2026-10-13 04:16:26 | 198.51.100.11 |
/.env |
RCE | 941100 XSS via libinjection |
Zistené |
| 2026-10-13 04:32:11 | 198.51.100.24 |
/api/v1/login |
SQL Injection | 932100 RCE — Unix commands |
Zistené |
| 2026-10-13 03:57:00 | 198.51.100.31 |
/xmlrpc.php |
SQL Injection | 941100 XSS via libinjection |
Zistené |
| 2026-10-13 01:33:24 | 198.51.100.21 |
/admin/ |
Protocol Attack | 932100 RCE — Unix commands |
Zistené |
| 2026-10-13 04:59:02 | 198.51.100.13 |
/index.php?id=1 |
XSS | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-13 06:13:22 | 198.51.100.33 |
/admin/ |
Protocol Attack | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 05:52:56 | 198.51.100.18 |
/.env |
SQL Injection | 913100 Security scanner — User-Agent |
Zablokované |
| 2026-10-13 05:51:17 | 198.51.100.11 |
/xmlrpc.php |
Scanner | 941100 XSS via libinjection |
Zablokované |
| 2026-10-13 01:42:30 | 198.51.100.17 |
/api/v1/login |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zistené |
| 2026-10-13 04:11:17 | 198.51.100.35 |
/admin/ |
RCE | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 20:15:32 | 198.51.100.21 |
/index.php?id=1 |
Protocol Attack | 941100 XSS via libinjection |
Zistené |
| 2026-10-12 20:54:06 | 198.51.100.32 |
/.env |
RCE | 932100 RCE — Unix commands |
Zistené |
| 2026-10-12 22:09:30 | 198.51.100.21 |
/wp-login.php |
Scanner | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-13 07:16:53 | 198.51.100.21 |
/?q=../../etc/passwd |
Scanner | 932100 RCE — Unix commands |
Zablokované |
| 2026-10-13 00:44:20 | 198.51.100.19 |
/admin/ |
LFI/Path Traversal | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-12 21:27:19 | 198.51.100.25 |
/index.php?id=1 |
Protocol Attack | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 20:37:56 | 198.51.100.18 |
/xmlrpc.php |
Scanner | 930100 Path Traversal (/../) |
Zablokované |
| 2026-10-12 19:02:56 | 198.51.100.23 |
/xmlrpc.php |
LFI/Path Traversal | 941100 XSS via libinjection |
Zistené |
| 2026-10-13 06:01:48 | 198.51.100.17 |
/wp-login.php |
SQL Injection | 942100 SQL Injection via libinjection |
Zablokované |
| 2026-10-13 06:42:59 | 198.51.100.28 |
/?q=../../etc/passwd |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zistené |
| 2026-10-12 22:43:24 | 198.51.100.14 |
/wp-login.php |
SQL Injection | 942100 SQL Injection via libinjection |
Zablokované |
| 2026-10-13 04:03:36 | 198.51.100.13 |
/api/v1/login |
SQL Injection | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 14:33:32 | 198.51.100.35 |
/api/v1/login |
XSS | 941100 XSS via libinjection |
Zablokované |
| 2026-10-12 21:26:48 | 198.51.100.29 |
/xmlrpc.php |
Scanner | 941100 XSS via libinjection |
Zistené |
| 2026-10-12 16:33:12 | 198.51.100.23 |
/?q=../../etc/passwd |
Protocol Attack | 941100 XSS via libinjection |
Zablokované |
| 2026-10-13 04:23:41 | 198.51.100.15 |
/?q=../../etc/passwd |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 19:41:16 | 198.51.100.15 |
/.env |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zablokované |
| 2026-10-12 10:39:14 | 198.51.100.14 |
/?q=../../etc/passwd |
RCE | 913100 Security scanner — User-Agent |
Zablokované |
| 2026-10-12 22:09:38 | 198.51.100.22 |
/xmlrpc.php |
XSS | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 12:39:27 | 198.51.100.25 |
/.env |
RCE | 913100 Security scanner — User-Agent |
Zablokované |
| 2026-10-12 22:20:28 | 198.51.100.18 |
/admin/ |
LFI/Path Traversal | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 21:52:26 | 198.51.100.13 |
/index.php?id=1 |
SQL Injection | 930100 Path Traversal (/../) |
Zablokované |
| 2026-10-12 23:51:00 | 198.51.100.33 |
/admin/ |
XSS | 941100 XSS via libinjection |
Zistené |
| 2026-10-13 03:57:34 | 198.51.100.33 |
/api/v1/login |
RCE | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-13 03:16:44 | 198.51.100.16 |
/?q=../../etc/passwd |
RCE | 932100 RCE — Unix commands |
Zistené |
| 2026-10-12 06:48:40 | 198.51.100.33 |
/admin/ |
Scanner | 913100 Security scanner — User-Agent |
Zablokované |
| 2026-10-12 17:02:26 | 198.51.100.13 |
/?q=../../etc/passwd |
RCE | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-12 21:56:56 | 198.51.100.11 |
/?q=../../etc/passwd |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 09:55:00 | 198.51.100.26 |
/wp-login.php |
LFI/Path Traversal | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-13 05:28:49 | 198.51.100.19 |
/.env |
LFI/Path Traversal | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-12 10:48:50 | 198.51.100.35 |
/.env |
SQL Injection | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-12 21:13:11 | 198.51.100.24 |
/.env |
LFI/Path Traversal | 932100 RCE — Unix commands |
Zistené |
| 2026-10-12 05:14:52 | 198.51.100.22 |
/?q=../../etc/passwd |
SQL Injection | 942100 SQL Injection via libinjection |
Zistené |
| 2026-10-12 12:03:05 | 198.51.100.15 |
/index.php?id=1 |
SQL Injection | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-12 22:03:34 | 198.51.100.13 |
/xmlrpc.php |
LFI/Path Traversal | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-12 12:54:22 | 198.51.100.11 |
/.env |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-12 05:24:56 | 198.51.100.27 |
/admin/ |
LFI/Path Traversal | 942100 SQL Injection via libinjection |
Zablokované |
| 2026-10-12 12:32:49 | 198.51.100.17 |
/wp-login.php |
SQL Injection | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-12 10:34:32 | 198.51.100.33 |
/api/v1/login |
Scanner | 930100 Path Traversal (/../) |
Zablokované |
| 2026-10-12 09:01:26 | 198.51.100.16 |
/.env |
Protocol Attack | 913100 Security scanner — User-Agent |
Zistené |
| 2026-10-12 06:37:00 | 198.51.100.17 |
/?q=../../etc/passwd |
Protocol Attack | 941100 XSS via libinjection |
Zistené |
| 2026-10-13 05:17:51 | 198.51.100.23 |
/index.php?id=1 |
SQL Injection | 942100 SQL Injection via libinjection |
Zablokované |
| 2026-10-12 20:36:20 | 198.51.100.26 |
/api/v1/login |
RCE | 932100 RCE — Unix commands |
Zistené |
| 2026-10-12 04:33:40 | 198.51.100.25 |
/.env |
Scanner | 930100 Path Traversal (/../) |
Zistené |
| 2026-10-13 04:01:52 | 198.51.100.25 |
/xmlrpc.php |
XSS | 930100 Path Traversal (/../) |
Zablokované |
ModSecurity s OWASP Core Rule Set blokuje obrovské množstvo vecí a takmer o všetkých píše do auditného logu, ktorého formát vznikol pre stroje. Táto stránka z neho robí niečo čitateľné: ktoré požiadavky boli zablokované, ktoré pravidlo zabralo, aké bolo anomálne skóre a odkiaľ požiadavka prišla.
Dôvodom chodiť sem pravidelne sú falošne pozitívne nálezy. Core Rule Set je zámerne prísny a pri predvolenej úrovni paranoje zablokuje legitímnu prevádzku vo väčšine reálnych aplikácií: nahrávanie súborov, editory formátovaného textu a všetko, čo posiela značkovanie alebo reťazce pripomínajúce SQL, sú obvyklé obete. Vzorec, ktorý treba spoznať, je ten istý identifikátor pravidla spúšťajúci sa opakovane na rovnakom koncovom bode z mnohých rôznych adries. To nie je útok, to sa chytá vaša vlastná aplikácia.
Keď taký prípad nájdete, držte výnimku úzku: vyraďte práve to pravidlo pre práve ten parameter na práve tej ceste, nikdy celé pravidlo a už vôbec nie celú kategóriu. Stránka tiež vypisuje aktívny súbor pravidiel, aby ste si po zmene overili, čo je skutočne načítané.