WAF logs

Vue lecture seule des logs WAF, générée le 2026-07-13 13:43:19Z. Données Parquet, moteur DuckDB. Une ligne = un événement réel.

Trafic par pool (aujourd’hui)

pool requetes
profileo 564
web2 319
web1 266
logs 40
interne 26

Règles CRS les plus déclenchées (7 jours)

rule_id total
930110 9225
930100 5878
949110 5177
920270 419
942151 383
933160 381
933100 371
942100 53
942190 41
930120 41
933150 40
942360 40
932235 33
932260 33
932250 30
932230 28
932160 23
933140 20
933120 20
941100 16

IP clientes les plus vues (7 jours)

client_ip hits
45.80.1.73 421
213.209.159.175 262
72.14.186.98 156
34.34.103.195 107
127.0.0.1 77
45.80.2.80 63
213.209.159.154 61
45.88.138.44 49
147.15.15.226 46
31.132.90.3 46
37.120.213.13 46
185.249.227.95 46
218.203.249.149 46
96.126.106.7 42
45.148.10.200 41
80.94.95.211 35
178.16.54.137 30
151.243.11.245 28
117.164.191.217 22
45.205.1.223 20

Derniers événements WAF

timestamp pool action http_status client_ip rules_matched uri
2026-07-13 15:42:30.051843+02 web1 blocked 0 45.80.1.73 942100,949110 /admin?id=1%20OR%201=1
2026-07-13 15:42:30.051619+02 web1 detected 404 45.80.1.73 NULL /products
2026-07-13 15:42:30.051452+02 web1 detected 404 45.80.1.73 NULL /contact
2026-07-13 15:42:30.051272+02 web1 detected 404 45.80.1.73 NULL /index.html
2026-07-13 15:42:30.051001+02 web1 detected 404 45.80.1.73 NULL /about
2026-07-13 15:42:27.976623+02 web2 detected 404 45.80.1.73 NULL /etc/passwd
2026-07-13 15:42:27.976566+02 web2 detected 404 45.80.1.73 NULL /index.html
2026-07-13 15:42:27.976508+02 web2 detected 404 45.80.1.73 NULL /products
2026-07-13 15:42:27.97644+02 web2 detected 404 45.80.1.73 NULL /search?q=shoes
2026-07-13 15:42:27.976352+02 web2 detected 404 45.80.1.73 NULL /about
2026-07-13 15:42:01.243302+02 web1 detected 404 216.73.216.15 NULL /robots.txt
2026-07-13 15:41:18.066095+02 web2 blocked 0 45.80.1.73 930120,932160,949110 /?cmd=;cat%20/etc/passwd
2026-07-13 15:41:18.065823+02 web2 detected 404 45.80.1.73 NULL /search?q=shoes
2026-07-13 15:41:18.065588+02 web2 detected 404 45.80.1.73 NULL /search?q=shoes
2026-07-13 15:41:18.065312+02 web2 detected 404 45.80.1.73 NULL /index.html
2026-07-13 15:41:11.878529+02 web1 blocked 0 45.80.1.73 930120,932160,949110 /?cmd=;cat%20/etc/passwd
2026-07-13 15:41:11.878423+02 web1 detected 404 45.80.1.73 NULL /about
2026-07-13 15:41:11.87835+02 web1 detected 404 45.80.1.73 NULL /index.html
2026-07-13 15:41:11.878276+02 web1 detected 404 45.80.1.73 NULL /contact
2026-07-13 15:41:11.8782+02 web1 detected 404 45.80.1.73 NULL /products
2026-07-13 15:41:11.878076+02 web1 detected 404 45.80.1.73 NULL /contact
2026-07-13 15:40:18.428677+02 web2 blocked 0 45.80.1.73 930120,932160,949110 /?cmd=;cat%20/etc/passwd
2026-07-13 15:40:18.428428+02 web2 detected 404 45.80.1.73 NULL /products
2026-07-13 15:40:18.42842+02 web2 detected 404 45.80.1.73 NULL /products
2026-07-13 15:40:18.428255+02 web2 detected 404 45.80.1.73 NULL /cart
2026-07-13 15:40:18.428213+02 web2 detected 404 45.80.1.73 NULL /contact
2026-07-13 15:40:18.427979+02 web2 detected 404 45.80.1.73 NULL /index.html
2026-07-13 15:40:12.24746+02 web1 blocked 0 45.80.1.73 941100,941110,941160,941390,949110 /?q=%3Cscript%3Ealert(1)%3C/script%3E
2026-07-13 15:40:12.247011+02 web1 detected 404 45.80.1.73 NULL /about
2026-07-13 15:40:12.246578+02 web1 detected 404 45.80.1.73 NULL /cart
2026-07-13 15:40:12.246117+02 web1 detected 404 45.80.1.73 NULL /contact
2026-07-13 15:40:12.245942+02 web1 detected 404 45.80.1.73 NULL /cart
2026-07-13 15:40:12.245713+02 web1 detected 404 45.80.1.73 NULL /products
2026-07-13 15:39:08.502181+02 web2 blocked 0 45.80.1.73 930100,930100,930110,930110,930110,930110,930120,932160,949110 /?file=../../../../etc/shadow
2026-07-13 15:39:08.501659+02 web2 detected 404 45.80.1.73 NULL /cart
2026-07-13 15:39:08.501391+02 web2 detected 404 45.80.1.73 NULL /search?q=shoes
2026-07-13 15:39:08.501171+02 web2 detected 404 45.80.1.73 NULL /about
2026-07-13 15:39:08.50096+02 web2 detected 404 45.80.1.73 NULL /search?q=shoes
2026-07-13 15:39:08.500727+02 web2 detected 404 45.80.1.73 NULL /products
2026-07-13 15:39:02.313979+02 web1 detected 404 45.80.1.73 NULL /etc/passwd

Derniers accès

timestamp pool status method client_ip path
2026-07-13 15:42:21.129555+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/etc/passwd
2026-07-13 15:42:21.039682+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/index.html
2026-07-13 15:42:20.931343+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/products
2026-07-13 15:42:20.833943+02 web2 200 GET 45.80.1.73 https://web2.profileo.shpv.work/
2026-07-13 15:42:20.731177+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/search
2026-07-13 15:42:20.633572+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/about
2026-07-13 15:42:20.535709+02 web1 403 GET 45.80.1.73 https://web1.profileo.shpv.work/admin
2026-07-13 15:42:20.443684+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/products
2026-07-13 15:42:20.399511+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/contact
2026-07-13 15:42:20.355819+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/index.html
2026-07-13 15:42:20.247742+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/about
2026-07-13 15:42:20.144744+02 web1 200 GET 45.80.1.73 https://web1.profileo.shpv.work/
2026-07-13 15:41:51.884045+02 web1 200 GET 216.73.216.15 https://web1.profileo.shpv.work/
2026-07-13 15:41:51.769335+02 web1 404 GET 216.73.216.15 https://web1.profileo.shpv.work/robots.txt
2026-07-13 15:41:10.60304+02 web2 403 GET 45.80.1.73 https://web2.profileo.shpv.work/
2026-07-13 15:41:10.543638+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/search
2026-07-13 15:41:10.498999+02 web2 200 GET 45.80.1.73 https://web2.profileo.shpv.work/
2026-07-13 15:41:10.447727+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/search
2026-07-13 15:41:10.411329+02 web2 200 GET 45.80.1.73 https://web2.profileo.shpv.work/
2026-07-13 15:41:10.375612+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/index.html
2026-07-13 15:41:10.332104+02 web1 403 GET 45.80.1.73 https://web1.profileo.shpv.work/
2026-07-13 15:41:10.280499+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/about
2026-07-13 15:41:10.205019+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/index.html
2026-07-13 15:41:10.165177+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/contact
2026-07-13 15:41:10.128873+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/products
2026-07-13 15:41:10.0917+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/contact
2026-07-13 15:40:12.869457+02 logs 200 GET 45.80.2.80 https://logs.profileo.shpv.work/
2026-07-13 15:40:11.219463+02 web2 403 GET 45.80.1.73 https://web2.profileo.shpv.work/
2026-07-13 15:40:11.123659+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/products
2026-07-13 15:40:11.017408+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/contact
2026-07-13 15:40:10.919315+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/products
2026-07-13 15:40:10.807182+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/cart
2026-07-13 15:40:10.711468+02 web2 404 GET 45.80.1.73 https://web2.profileo.shpv.work/index.html
2026-07-13 15:40:10.613963+02 web1 403 GET 45.80.1.73 https://web1.profileo.shpv.work/
2026-07-13 15:40:10.519409+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/about
2026-07-13 15:40:10.423881+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/cart
2026-07-13 15:40:10.328808+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/contact
2026-07-13 15:40:10.232986+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/cart
2026-07-13 15:40:10.132371+02 web1 404 GET 45.80.1.73 https://web1.profileo.shpv.work/products
2026-07-13 15:39:00.779012+02 web2 403 GET 45.80.1.73 https://web2.profileo.shpv.work/