Reports

IskWaf1 min readPage 12 of 13
On this page 2

Reports

Daily summaries in IskWafReportDaily include: the total number of WAF events, blocks, CAPTCHAs, rule-based allows, triggers by rule type, search bot hits, and the top N IPs and rules (JSON). They are built by a CRON script.

This product includes IP2Location LITE data available from https://lite.ip2location.com.

Important notes

  • Rule order: IP rules -> country blocking -> User-Agent -> Referrer -> Request URI. The first matching rule determines the action.
  • Regular expressions: must include delimiters/flags (for example, /badbot/i). Test them.
  • Visitor IP address: $_SERVER['REMOTE_ADDR'] by default. Sites behind a proxy may need adjustments.
  • Performance: a large number of rules or the full logging mode may affect performance.
  • False positives: are possible. Check the logs regularly.