ModSecurity

购买 Self-Hosted Protection
Live
Demo
ModSecurity WAF
缓存: 23:54:38 刷新
ModSecurity 运行中
今天
2788
已拦截
160
样本总数
2788
唯一 IP 数
10
所有已启用规则
规则列表不可用 —— 请更新 monitor-modsec 包装脚本，添加 ---RULES--- 部分（见 FAQ）。
攻击类型
RCE
19
Protocol Attack
15
SQL Injection
14
LFI/Path Traversal
13
Scanner
13
XSS
12
攻击 IP 排行
IP事件
198.51.100.189
198.51.100.227
198.51.100.356
198.51.100.215
198.51.100.135
198.51.100.244
198.51.100.274
198.51.100.154
198.51.100.194
198.51.100.143
目标 URL 排行
URI事件
/.env17
/api/v1/login14
/index.php?id=113
/?q=../../etc/passwd11
/admin/11
/wp-login.php11
/xmlrpc.php9
触发规则排行
规则 ID触发次数
930100
Path Traversal (/../)		 22
932100
RCE — Unix commands		 20
941100
XSS via libinjection		 18
942100
SQL Injection via libinjection		 14
913100
Security scanner — User-Agent		 12
最近事件 86 条记录
时间IPURI类型规则操作
2026-10-11 23:54:38 198.51.100.26 /?q=../../etc/passwd Protocol Attack 930100
Path Traversal (/../)		 已检测
2026-10-11 23:46:26 198.51.100.21 /xmlrpc.php LFI/Path Traversal 942100
SQL Injection via libinjection		 已拦截
2026-10-11 23:39:26 198.51.100.24 /.env XSS 932100
RCE — Unix commands		 已检测
2026-10-11 22:21:17 198.51.100.18 /?q=../../etc/passwd XSS 913100
Security scanner — User-Agent		 已拦截
2026-10-11 23:30:14 198.51.100.14 /.env XSS 942100
SQL Injection via libinjection		 已检测
2026-10-11 21:28:48 198.51.100.28 /admin/ Scanner 942100
SQL Injection via libinjection		 已检测
2026-10-11 20:46:50 198.51.100.18 /wp-login.php LFI/Path Traversal 932100
RCE — Unix commands		 已检测
2026-10-11 22:08:14 198.51.100.27 /index.php?id=1 LFI/Path Traversal 941100
XSS via libinjection		 已检测
2026-10-11 20:28:30 198.51.100.22 /xmlrpc.php SQL Injection 932100
RCE — Unix commands		 已检测
2026-10-11 20:20:26 198.51.100.12 /api/v1/login RCE 932100
RCE — Unix commands		 已检测
2026-10-11 19:52:48 198.51.100.16 /.env LFI/Path Traversal 932100
RCE — Unix commands		 已检测
2026-10-11 21:17:53 198.51.100.11 /admin/ LFI/Path Traversal 942100
SQL Injection via libinjection		 已检测
2026-10-11 18:49:14 198.51.100.17 /index.php?id=1 Protocol Attack 941100
XSS via libinjection		 已拦截
2026-10-11 20:45:42 198.51.100.15 /api/v1/login SQL Injection 930100
Path Traversal (/../)		 已拦截
2026-10-11 17:43:52 198.51.100.18 /api/v1/login Scanner 941100
XSS via libinjection		 已检测
2026-10-11 19:30:08 198.51.100.16 /index.php?id=1 Scanner 941100
XSS via libinjection		 已检测
2026-10-11 17:48:14 198.51.100.22 /.env XSS 932100
RCE — Unix commands		 已检测
2026-10-11 22:00:10 198.51.100.26 /wp-login.php SQL Injection 941100
XSS via libinjection		 已检测
2026-10-11 18:40:14 198.51.100.15 /xmlrpc.php Scanner 913100
Security scanner — User-Agent		 已拦截
2026-10-11 17:04:52 198.51.100.30 /wp-login.php RCE 941100
XSS via libinjection		 已检测
2026-10-11 18:53:38 198.51.100.35 /index.php?id=1 XSS 941100
XSS via libinjection		 已拦截
2026-10-11 14:13:38 198.51.100.33 /admin/ Protocol Attack 942100
SQL Injection via libinjection		 已检测
2026-10-11 16:13:00 198.51.100.22 /api/v1/login Protocol Attack 941100
XSS via libinjection		 已检测
2026-10-11 16:52:12 198.51.100.33 /api/v1/login Protocol Attack 942100
SQL Injection via libinjection		 已检测
2026-10-11 18:50:14 198.51.100.18 /wp-login.php RCE 913100
Security scanner — User-Agent		 已拦截
2026-10-11 11:21:18 198.51.100.33 /?q=../../etc/passwd Protocol Attack 941100
XSS via libinjection		 已检测
2026-10-11 18:56:04 198.51.100.22 /admin/ XSS 942100
SQL Injection via libinjection		 已拦截
2026-10-11 15:49:32 198.51.100.23 /admin/ Scanner 932100
RCE — Unix commands		 已拦截
2026-10-11 11:40:06 198.51.100.19 /admin/ RCE 942100
SQL Injection via libinjection		 已检测
2026-10-11 08:49:50 198.51.100.18 /wp-login.php Protocol Attack 932100
RCE — Unix commands		 已检测
2026-10-11 17:49:38 198.51.100.22 /admin/ SQL Injection 941100
XSS via libinjection		 已检测
2026-10-11 14:31:59 198.51.100.34 /.env LFI/Path Traversal 932100
RCE — Unix commands		 已拦截
2026-10-11 20:06:54 198.51.100.19 /.env RCE 941100
XSS via libinjection		 已检测
2026-10-11 06:15:20 198.51.100.35 /index.php?id=1 SQL Injection 930100
Path Traversal (/../)		 已检测
2026-10-11 05:41:32 198.51.100.15 /index.php?id=1 SQL Injection 913100
Security scanner — User-Agent		 已检测
2026-10-11 13:13:33 198.51.100.21 /index.php?id=1 XSS 941100
XSS via libinjection		 已检测
2026-10-11 18:39:02 198.51.100.35 /.env XSS 941100
XSS via libinjection		 已检测
2026-10-11 15:35:45 198.51.100.32 /xmlrpc.php LFI/Path Traversal 930100
Path Traversal (/../)		 已拦截
2026-10-11 04:29:18 198.51.100.17 /?q=../../etc/passwd RCE 913100
Security scanner — User-Agent		 已检测
2026-10-11 04:31:08 198.51.100.22 /.env Scanner 930100
Path Traversal (/../)		 已拦截
2026-10-11 06:53:18 198.51.100.24 /api/v1/login RCE 930100
Path Traversal (/../)		 已检测
2026-10-11 13:49:12 198.51.100.25 /xmlrpc.php RCE 932100
RCE — Unix commands		 已检测
2026-10-11 12:51:44 198.51.100.19 /wp-login.php Protocol Attack 932100
RCE — Unix commands		 已检测
2026-10-11 01:02:56 198.51.100.17 /.env LFI/Path Traversal 913100
Security scanner — User-Agent		 已检测
2026-10-11 15:31:34 198.51.100.21 /.env RCE 930100
Path Traversal (/../)		 已检测
2026-10-11 07:19:23 198.51.100.18 /xmlrpc.php LFI/Path Traversal 942100
SQL Injection via libinjection		 已拦截
2026-10-11 17:20:34 198.51.100.18 /api/v1/login XSS 942100
SQL Injection via libinjection		 已检测
2026-10-11 05:16:49 198.51.100.19 /xmlrpc.php Scanner 930100
Path Traversal (/../)		 已检测
2026-10-11 11:49:50 198.51.100.27 /wp-login.php SQL Injection 932100
RCE — Unix commands		 已拦截
2026-10-11 11:11:03 198.51.100.18 /.env Scanner 913100
Security scanner — User-Agent		 已拦截
2026-10-11 17:01:18 198.51.100.24 /.env SQL Injection 913100
Security scanner — User-Agent		 已检测
2026-10-11 02:58:20 198.51.100.12 /?q=../../etc/passwd RCE 941100
XSS via libinjection		 已检测
2026-10-11 04:50:38 198.51.100.27 /admin/ RCE 930100
Path Traversal (/../)		 已检测
2026-10-10 20:18:23 198.51.100.35 /xmlrpc.php RCE 942100
SQL Injection via libinjection		 已检测
2026-10-11 13:11:08 198.51.100.14 /api/v1/login Scanner 930100
Path Traversal (/../)		 已检测
2026-10-10 21:27:53 198.51.100.18 /.env Scanner 941100
XSS via libinjection		 已检测
2026-10-11 05:24:54 198.51.100.20 /api/v1/login RCE 941100
XSS via libinjection		 已拦截
2026-10-11 04:43:14 198.51.100.13 /index.php?id=1 SQL Injection 930100
Path Traversal (/../)		 已拦截
2026-10-11 13:27:16 198.51.100.23 /wp-login.php RCE 941100
XSS via libinjection		 已检测
2026-10-11 05:13:38 198.51.100.11 /wp-login.php XSS 930100
Path Traversal (/../)		 已检测
2026-10-11 18:40:38 198.51.100.31 /?q=../../etc/passwd SQL Injection 913100
Security scanner — User-Agent		 已检测
2026-10-10 15:00:16 198.51.100.21 /api/v1/login Scanner 932100
RCE — Unix commands		 已检测
2026-10-11 02:27:06 198.51.100.29 /xmlrpc.php LFI/Path Traversal 913100
Security scanner — User-Agent		 已检测
2026-10-10 15:27:56 198.51.100.14 /wp-login.php Protocol Attack 932100
RCE — Unix commands		 已检测
2026-10-10 14:33:34 198.51.100.35 /?q=../../etc/passwd Scanner 930100
Path Traversal (/../)		 已拦截
2026-10-11 11:39:03 198.51.100.22 /?q=../../etc/passwd SQL Injection 930100
Path Traversal (/../)		 已检测
2026-10-11 17:35:08 198.51.100.24 /wp-login.php RCE 941100
XSS via libinjection		 已检测
2026-10-11 17:30:30 198.51.100.13 /index.php?id=1 LFI/Path Traversal 930100
Path Traversal (/../)		 已拦截
2026-10-11 12:09:42 198.51.100.21 /index.php?id=1 RCE 930100
Path Traversal (/../)		 已检测
2026-10-10 13:52:14 198.51.100.32 /api/v1/login Scanner 942100
SQL Injection via libinjection		 已检测
2026-10-11 13:35:08 198.51.100.35 /.env Protocol Attack 913100
Security scanner — User-Agent		 已检测
2026-10-11 16:37:59 198.51.100.15 /index.php?id=1 XSS 930100
Path Traversal (/../)		 已拦截
2026-10-11 11:39:02 198.51.100.25 /?q=../../etc/passwd Protocol Attack 932100
RCE — Unix commands		 已检测
2026-10-11 18:54:07 198.51.100.13 /.env Protocol Attack 932100
RCE — Unix commands		 已拦截
2026-10-10 10:39:50 198.51.100.11 /api/v1/login LFI/Path Traversal 932100
RCE — Unix commands		 已拦截
2026-10-11 09:52:08 198.51.100.16 /?q=../../etc/passwd RCE 913100
Security scanner — User-Agent		 已拦截
2026-10-10 19:15:46 198.51.100.34 /admin/ SQL Injection 932100
RCE — Unix commands		 已检测
2026-10-10 20:40:57 198.51.100.28 /.env RCE 932100
RCE — Unix commands		 已拦截
2026-10-11 04:09:02 198.51.100.13 /admin/ Protocol Attack 930100
Path Traversal (/../)		 已检测
2026-10-11 15:55:22 198.51.100.25 /admin/ SQL Injection 932100
RCE — Unix commands		 已检测
2026-10-10 15:17:18 198.51.100.28 /api/v1/login RCE 942100
SQL Injection via libinjection		 已拦截
2026-10-10 10:33:38 198.51.100.30 /?q=../../etc/passwd Protocol Attack 930100
Path Traversal (/../)		 已检测
2026-10-10 16:43:40 198.51.100.27 /.env SQL Injection 930100
Path Traversal (/../)		 已检测
2026-10-11 05:59:47 198.51.100.20 /index.php?id=1 LFI/Path Traversal 942100
SQL Injection via libinjection		 已检测
2026-10-11 10:36:38 198.51.100.13 /index.php?id=1 Protocol Attack 930100
Path Traversal (/../)		 已检测
2026-10-11 11:12:28 198.51.100.31 /api/v1/login XSS 930100
Path Traversal (/../)		 已拦截

为审计日志准备的 ModSecurity log viewer

ModSecurity 配上 OWASP Core Rule Set 会拦下大量东西，并把其中几乎所有内容写进一份格式为机器而设的审计日志。这一页把它变成人能读的东西：哪些请求被拦、哪条规则触发、异常分是多少，以及请求来自何处。

定期来看这一页的理由是误报。核心规则集是刻意严格的，在默认的偏执等级下，它会在大多数真实应用中拦下合法流量：文件上传、富文本编辑器，以及一切会提交标记或类 SQL 字符串的东西，都是常见的受害者。需要认出的模式是：同一个规则编号在同一个接口上、从许多不同地址反复触发。那不是攻击，那是你自己的应用被抓住了。

找到这种情形时，把例外范围收窄：只排除那一条规则、针对那一个参数、在那一条路径上——绝不要排除整条规则，更不要排除整个类别。这一页同时列出当前生效的规则集，方便你在改动之后确认到底加载了什么。