{"id":2205,"date":"2026-09-21T15:00:00","date_gmt":"2026-09-21T12:00:00","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=2205"},"modified":"2026-09-21T15:00:00","modified_gmt":"2026-09-21T12:00:00","slug":"cpanelde-supheli-giris-nasil-tespit-edilir","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/cpanelde-supheli-giris-nasil-tespit-edilir\/","title":{"rendered":"cPanel Eri\u015fim Loglar\u0131nda \u015e\u00fcpheli Giri\u015f Nas\u0131l Tespit Edilir"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son do\u011frulama: Eyl\u00fcl 2026 \u00b7 cPanel 136 test hesab\u0131nda denendi<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>cPanel \u015f\u00fcpheli giri\u015f tespiti<\/strong> payla\u015f\u0131ml\u0131 hostingde sunucunun kimlik g\u00fcnl\u00fcklerinden de\u011fil, sitenizin web eri\u015fim g\u00fcnl\u00fcklerinden yap\u0131l\u0131r: Ham Eri\u015fim (Raw Access) g\u00fcnl\u00fc\u011f\u00fcn\u00fc indirip <code>wp-login.php<\/code> ve <code>xmlrpc.php<\/code> adreslerine gelen tekrarl\u0131 POST isteklerini ve tan\u0131mad\u0131\u011f\u0131n\u0131z IP adreslerini incelersiniz.<\/p>\n<ol>\n<li>cPanel&#8217;de <strong>\u00d6l\u00e7\u00fcmler \u2192 Ham Eri\u015fim<\/strong> sayfas\u0131n\u0131 a\u00e7\u0131n ve alan ad\u0131n\u0131z\u0131n g\u00fcnl\u00fc\u011f\u00fcn\u00fc indirin.<\/li>\n<li>G\u00fcnl\u00fckte <code>POST \/wp-login.php<\/code> ve <code>xmlrpc.php<\/code> sat\u0131rlar\u0131n\u0131 aray\u0131n.<\/li>\n<li>Ayn\u0131 IP&#8217;den k\u0131sa s\u00fcrede gelen \u00e7ok say\u0131da denemeyi ve ba\u015far\u0131l\u0131 yan\u0131t kodlar\u0131n\u0131 (302, 200) not edin.<\/li>\n<li>\u015e\u00fcpheli IP&#8217;yi <strong>G\u00fcvenlik \u2192 IP Engelleyici<\/strong> ile kapat\u0131n, y\u00f6netici parolas\u0131n\u0131 de\u011fi\u015ftirin.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>cPanel<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Payla\u015f\u0131ml\u0131 hosting (web eri\u015fim g\u00fcnl\u00fckleri)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>cPanel kullan\u0131c\u0131s\u0131<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/web-hosting\" title=\"Web Hosting - Narhost\">Web Hosting<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>cPanel kullan\u0131c\u0131 ad\u0131 ve \u015fifrenizle panele giri\u015f yapabiliyor olmal\u0131s\u0131n\u0131z.<\/li>\n<li>Kendi d\u00fczenli olarak ba\u011fland\u0131\u011f\u0131n\u0131z IP adresini bilin; g\u00fcnl\u00fckte tan\u0131d\u0131k ile yabanc\u0131 trafi\u011fi ay\u0131rmak i\u00e7in gerekir.<\/li>\n<li>Payla\u015f\u0131ml\u0131 hostingde SSH ve sistem <code>auth.log<\/code> dosyas\u0131 m\u00fc\u015fteriye a\u00e7\u0131k de\u011fildir; inceleme web eri\u015fim g\u00fcnl\u00fckleriyle s\u0131n\u0131rl\u0131d\u0131r.<\/li>\n<li>\u015e\u00fcphe kesinle\u015firse \u00f6nce <a href=\"https:\/\/narhost.com\/destek\/cpanelde-ip-engelleme\/\" title=\"cPanel&#039;de IP engelleme nas\u0131l yap\u0131l\u0131r - Narhost Destek\">IP engelleme<\/a> ve parola de\u011fi\u015fikli\u011fi yap\u0131l\u0131r.<\/li>\n<\/ul>\n<\/div>\n<h2>cPanel \u015e\u00fcpheli Giri\u015f Tespiti Ne \u0130\u015fe Yarar<\/h2>\n<p>Payla\u015f\u0131ml\u0131 bir hesapta ger\u00e7ek &#8220;giri\u015f&#8221; iki ayr\u0131 yerde olur: cPanel oturumu ve site y\u00f6netim paneli (\u00f6rne\u011fin WordPress). Sunucunun kimlik do\u011frulama g\u00fcnl\u00fckleri m\u00fc\u015fteriye a\u00e7\u0131lmad\u0131\u011f\u0131 i\u00e7in, d\u0131\u015far\u0131dan gelen deneme trafi\u011fini g\u00f6rebilece\u011finiz tek kaynak web sunucusunun tuttu\u011fu <a href=\"https:\/\/docs.cpanel.net\/cpanel\/metrics\/raw-access\/\" title=\"cPanel Ham Eri\u015fim (Raw Access) resmi dok\u00fcmantasyonu\" target=\"_blank\" rel=\"noopener\">eri\u015fim g\u00fcnl\u00fckleridir (Ham Eri\u015fim)<\/a>. Bu g\u00fcnl\u00fck, siteye gelen her iste\u011fin IP adresini, tarih ve saatini, istenen adresi ve sunucunun d\u00f6nd\u00fcrd\u00fc\u011f\u00fc yan\u0131t kodunu sat\u0131r sat\u0131r tutar.<\/p>\n<p>Bir botun ya da sald\u0131rgan\u0131n y\u00f6netim paneline s\u0131zma denemesi bu g\u00fcnl\u00fckte belirgin bir \u00f6r\u00fcnt\u00fc b\u0131rak\u0131r: ayn\u0131 IP adresinden <code>wp-login.php<\/code> veya <code>xmlrpc.php<\/code> adresine dakikada onlarca POST iste\u011fi. \u0130steklerin \u00e7o\u011fu 200 ya da 401 d\u00f6nerken aniden bir 302 y\u00f6nlendirmesi g\u00f6r\u00fcrseniz, o deneme ba\u015far\u0131l\u0131 olmu\u015f olabilir. Ama\u00e7 sald\u0131r\u0131y\u0131 \u00f6\u011fretmek de\u011fil, bu izleri erken g\u00f6r\u00fcp eri\u015fimi kapatmakt\u0131r.<\/p>\n<h2>Ad\u0131m Ad\u0131m cPanel \u015e\u00fcpheli Giri\u015f Tespiti<\/h2>\n<h3>Ham Eri\u015fim G\u00fcnl\u00fc\u011f\u00fcn\u00fc \u0130ndirme<\/h3>\n<ol class=\"kb-adimlar\">\n<li><strong>cPanel \u2192 \u00d6l\u00e7\u00fcmler \u2192 Ham Eri\u015fim (Raw Access)<\/strong> sayfas\u0131n\u0131 a\u00e7\u0131n ve ilgili alan ad\u0131n\u0131n yan\u0131ndaki ba\u011flant\u0131dan s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f g\u00fcnl\u00fc\u011f\u00fc indirin. Sayfan\u0131n alt\u0131ndaki &#8220;\u015eu anda ar\u015fivlenmi\u015f g\u00fcnl\u00fckler&#8221; b\u00f6l\u00fcm\u00fcnden ge\u00e7mi\u015f g\u00fcnleri de alabilirsiniz.<br \/>\n<figure class=\"kb-ekran\"><img decoding=\"async\" src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/cpanelde-supheli-giris-nasil-tespit-edilir-adim-1.webp\" alt=\"cPanel \u015f\u00fcpheli giri\u015f tespiti i\u00e7in Ham Eri\u015fim (Raw Access) sayfas\u0131nda eri\u015fim g\u00fcnl\u00fc\u011f\u00fcn\u00fc indirme\" width=\"1200\" height=\"898\" loading=\"lazy\"><figcaption>Ham Eri\u015fim sayfas\u0131; her alan ad\u0131 i\u00e7in indirilebilir eri\u015fim g\u00fcnl\u00fc\u011f\u00fc ve ar\u015fivlenmi\u015f g\u00fcnler.<\/figcaption><\/figure>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>.gz<\/code> uzant\u0131l\u0131 bir g\u00fcnl\u00fck dosyas\u0131 iner; a\u00e7\u0131ld\u0131\u011f\u0131nda her sat\u0131r bir HTTP iste\u011fidir.<\/p>\n<\/li>\n<\/ol>\n<h3>G\u00fcnl\u00fckte Deneme \u00d6r\u00fcnt\u00fcs\u00fcn\u00fc Arama<\/h3>\n<ol class=\"kb-adimlar\">\n<li>G\u00fcnl\u00fc\u011f\u00fc bir metin d\u00fczenleyicide a\u00e7\u0131n ve <code>wp-login.php<\/code>, <code>xmlrpc.php<\/code>, <code>\/administrator<\/code> gibi giri\u015f adreslerini aray\u0131n. \u00d6rnek sat\u0131rlar \u015f\u00f6yle g\u00f6r\u00fcn\u00fcr:\n<pre><code>203.0.113.45 - - [14\/Sep\/2026:03:11:02 +0300] \"POST \/wp-login.php HTTP\/1.1\" 200 4021\n203.0.113.45 - - [14\/Sep\/2026:03:11:04 +0300] \"POST \/wp-login.php HTTP\/1.1\" 200 4021\n203.0.113.45 - - [14\/Sep\/2026:03:11:07 +0300] \"POST \/xmlrpc.php HTTP\/1.1\" 200 512<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: ayn\u0131 IP&#8217;den saniyeler arayla tekrarlayan POST istekleri deneme (brute force) i\u015faretidir.<\/p>\n<\/li>\n<\/ol>\n<h3>Son Ziyaret\u00e7ileri ve Yan\u0131t Kodlar\u0131n\u0131 \u0130nceleme<\/h3>\n<ol class=\"kb-adimlar\">\n<li><strong>cPanel \u2192 \u00d6l\u00e7\u00fcmler \u2192 Ziyaret\u00e7iler<\/strong> sayfas\u0131ndan <a href=\"https:\/\/docs.cpanel.net\/cpanel\/metrics\/visitors\/\" title=\"cPanel Ziyaret\u00e7iler (Visitors) resmi dok\u00fcmantasyonu\" target=\"_blank\" rel=\"noopener\">son istekleri tablo h\u00e2linde<\/a> g\u00f6r\u00fcn; IP, istenen adres ve durum kodunu s\u0131ralay\u0131n. Bir denemenin 302 ile bitti\u011fi ya da y\u00f6netim paneline eri\u015fim sonras\u0131 <code>\/wp-admin\/<\/code> isteklerinin geldi\u011fi sat\u0131rlar, giri\u015fin ba\u015far\u0131l\u0131 oldu\u011funa i\u015farettir.<br \/>\n<figure class=\"kb-ekran\"><img decoding=\"async\" src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/cpanelde-supheli-giris-nasil-tespit-edilir-adim-2.webp\" alt=\"cPanel Ziyaret\u00e7iler sayfas\u0131nda son istekleri, IP adreslerini ve yan\u0131t kodlar\u0131n\u0131 inceleme\" width=\"1200\" height=\"323\" loading=\"lazy\"><figcaption>Ziyaret\u00e7iler sayfas\u0131; son istekler IP, istenen adres ve durum koduyla listelenir.<\/figcaption><\/figure>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: tan\u0131mad\u0131\u011f\u0131n\u0131z bir IP&#8217;nin giri\u015f sonras\u0131 y\u00f6netim sayfalar\u0131na ula\u015ft\u0131\u011f\u0131n\u0131 g\u00f6r\u00fcrseniz hesab\u0131 ele ge\u00e7irilmi\u015f kabul edin.<\/p>\n<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Bir giri\u015fin ba\u015far\u0131l\u0131 oldu\u011fundan \u015f\u00fcpheleniyorsan\u0131z yaln\u0131zca IP engellemek yetmez; sald\u0131rgan oturum \u00e7erezini ya da parolay\u0131 ele ge\u00e7irmi\u015f olabilir. Bu durumda t\u00fcm y\u00f6netici ve FTP parolalar\u0131n\u0131 de\u011fi\u015ftirin, oturumlar\u0131 kapat\u0131n ve dosyalarda de\u011fi\u015fiklik olup olmad\u0131\u011f\u0131n\u0131 denetleyin.<\/p>\n<\/div>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>\u015e\u00fcpheli IP&#8217;yi IP Engelleyici ile kapatt\u0131ktan sonra Ham Eri\u015fim g\u00fcnl\u00fc\u011f\u00fcnde o adresten yeni istek gelmiyorsa, y\u00f6netici parolas\u0131n\u0131 de\u011fi\u015ftirdikten sonra Ziyaret\u00e7iler sayfas\u0131nda tan\u0131mad\u0131\u011f\u0131n\u0131z <code>\/wp-admin\/<\/code> iste\u011fi g\u00f6r\u00fcnm\u00fcyorsa tehdit durdurulmu\u015f demektir.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00c7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Denemeler farkl\u0131 IP&#8217;lerden geliyor.<\/strong> Tek adres kapatmak yetmez; <a href=\"https:\/\/narhost.com\/destek\/imunify360-brute-force-koruma\/\" title=\"Brute force sald\u0131r\u0131lar\u0131n\u0131 Imunify360 ile engelleme - Narhost Destek\">Imunify360&#8217;\u0131n otomatik brute force katman\u0131na<\/a> bak\u0131n.<\/li>\n<li><strong>Giri\u015fin ba\u015far\u0131l\u0131 oldu\u011funu d\u00fc\u015f\u00fcn\u00fcyorsunuz.<\/strong> Dosyalarda zararl\u0131 kod olabilir; <a href=\"https:\/\/narhost.com\/destek\/hacklenen-site-zararli-dosya-temizleme\/\" title=\"Hacklenen sitede zararl\u0131 dosya temizleme - Narhost Destek\">zararl\u0131 dosya temizleme<\/a> ad\u0131mlar\u0131n\u0131 uygulay\u0131n.<\/li>\n<li><strong>Sunucu g\u00fcnl\u00fcklerine ihtiyac\u0131n\u0131z var.<\/strong> Payla\u015f\u0131ml\u0131da sistem kimlik g\u00fcnl\u00fckleri a\u00e7\u0131k de\u011fildir; kapsaml\u0131 inceleme i\u00e7in <a href=\"https:\/\/narhost.com\/destek\/web-sitesi-ve-sunucu-guvenligi-rehberi\/\" title=\"Web sitesi ve sunucu g\u00fcvenli\u011fi rehberi - Narhost Destek\">g\u00fcvenlik rehberini<\/a> izleyin ve destek talebi a\u00e7\u0131n.<\/li>\n<li><strong>Deneme sonras\u0131 hata al\u0131yorsunuz.<\/strong> Uygulama g\u00fcnl\u00fc\u011f\u00fcn\u00fc <a href=\"https:\/\/narhost.com\/destek\/cpanel-hata-gunlukleri-inceleme\/\" title=\"cPanel hata g\u00fcnl\u00fckleri inceleme - Narhost Destek\">cPanel hata g\u00fcnl\u00fckleri<\/a> kart\u0131yla okuyun.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Talebinize alan ad\u0131n\u0131z\u0131, g\u00fcnl\u00fckte g\u00f6rd\u00fc\u011f\u00fcn\u00fcz \u015f\u00fcpheli IP adresini, iste\u011fin saatini ve denedi\u011finiz ad\u0131mlar\u0131 ekleyin; ekibimiz sunucu taraf\u0131ndaki izleri sizin i\u00e7in denetler.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/guvenlik-duvari\/\" title=\"G\u00fcvenlik destek kategorisi - Narhost\">G\u00fcvenlik destek kategorisi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/cpanelde-ip-engelleme\/\" title=\"cPanel&#039;de IP engelleme nas\u0131l yap\u0131l\u0131r - Narhost Destek\">cPanel&#8217;de IP engelleme<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/cpanelde-iki-faktorlu-dogrulama\/\" title=\"cPanel&#039;de iki fakt\u00f6rl\u00fc do\u011frulama - Narhost Destek\">cPanel&#8217;de iki fakt\u00f6rl\u00fc do\u011frulama<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/wordpresste-zararli-kod-taramasi-nasil-yapabilirim\/\" title=\"WordPress&#039;te zararl\u0131 kod taramas\u0131 nas\u0131l yap\u0131l\u0131r - Narhost Destek\">WordPress&#8217;te zararl\u0131 kod taramas\u0131<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Payla\u015f\u0131ml\u0131 hostingde cPanel \u015f\u00fcpheli giri\u015f tespiti i\u00e7in sistem auth g\u00fcnl\u00fc\u011f\u00fcn\u00fc g\u00f6rebilir miyim?<\/h3>\n<p>Hay\u0131r. Payla\u015f\u0131ml\u0131 hesapta SSH ve <code>\/var\/log\/auth.log<\/code> gibi sistem kimlik g\u00fcnl\u00fckleri m\u00fc\u015fteriye a\u00e7\u0131lmaz. \u0130nceleme, web sunucusunun tuttu\u011fu eri\u015fim g\u00fcnl\u00fckleriyle (Ham Eri\u015fim ve Ziyaret\u00e7iler) s\u0131n\u0131rl\u0131d\u0131r; bunlar da site paneline y\u00f6nelik denemeleri g\u00f6rmeye yeter.<\/p>\n<h3>Hangi yan\u0131t kodu ba\u015far\u0131l\u0131 giri\u015fe i\u015faret eder?<\/h3>\n<p>Giri\u015f sayfas\u0131na POST sonras\u0131 200 \u00e7o\u011funlukla ba\u015far\u0131s\u0131z denemedir; panele y\u00f6nlendiren 302 kodu ve ard\u0131ndan gelen <code>\/wp-admin\/<\/code> istekleri giri\u015fin ba\u015far\u0131l\u0131 oldu\u011funu d\u00fc\u015f\u00fcnd\u00fcr\u00fcr. Tek ba\u015f\u0131na bir kod kesin kan\u0131t de\u011fildir, \u00f6r\u00fcnt\u00fcye bak\u0131n.<\/p>\n<h3>Deneme trafi\u011fini kal\u0131c\u0131 olarak nas\u0131l azalt\u0131r\u0131m?<\/h3>\n<p>Y\u00f6netici parolas\u0131n\u0131 g\u00fc\u00e7lendirin, iki fakt\u00f6rl\u00fc do\u011frulamay\u0131 a\u00e7\u0131n ve tekrarlayan kaynaklar\u0131 IP Engelleyici ile kapat\u0131n. S\u00fcrekli de\u011fi\u015fen IP&#8217;ler i\u00e7in Imunify360&#8217;\u0131n otomatik katman\u0131 zaten devrededir.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Payla\u015f\u0131ml\u0131 hostingde cPanel Ham Eri\u015fim ve Ziyaret\u00e7iler g\u00fcnl\u00fcklerinden wp-login.php ve xmlrpc.php denemelerini, tekrarlayan IP adreslerini ve \u015f\u00fcpheli yan\u0131t kodlar\u0131n\u0131 okuyarak y\u00f6netim paneline y\u00f6nelik giri\u015f denemelerini tespit etme ve eri\u015fimi kapatma ad\u0131mlar\u0131.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,9],"tags":[],"class_list":["post-2205","post","type-post","status-publish","format-standard","hentry","category-guvenlik-duvari","category-web-hosting"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=2205"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2205\/revisions"}],"predecessor-version":[{"id":2316,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2205\/revisions\/2316"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=2205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=2205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=2205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}