Skip to content

MyApache ModSecurity Audit Logs

ℹ️ Conditional navigation - this page is listed in the MyApache navigation group only when the ModSecurity module is installed and enabled; otherwise it is reachable only by its direct URL.

The MyApache ModSecurity Audit Logs page is the audit log viewer for the ModSecurity web application firewall. It displays blocked HTTP requests intercepted by ModSecurity.

MyApache ModSecurity Audit Logs

Overview

This section helps administrators review potentially malicious or policy-violating HTTP requests that were blocked by ModSecurity. It is essential for identifying attack attempts and tuning ModSecurity rules.

URL: /admin/my-apache-mod-security-audit-logs

Interface Elements

  • Search Bar - Allows you to search any term in the log (IP address, path, method, etc.).

Log Table

ColumnDescription
TimeDate and time when the request was blocked.
Client IPIP address of the client that triggered the ModSecurity rule.
SeverityLog level such as INFO, WARNING, etc.
PathThe requested URI that triggered the rule.
MethodHTTP method used (e.g., GET, POST).
ResponseHTTP response returned to the client (e.g., 403 Forbidden).

Pagination

Located below the log table:

  • Navigate through pages of results.
  • Select how many results to display per page: 10, 25, 50, or All.