Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
[FriJun1203:44:31.4784612026][security2:error][pid2923515:tid2923624][client34.179.238.21:0]ModSecur ...
show more[FriJun1203:44:31.4784612026][security2:error][pid2923515:tid2923624][client34.179.238.21:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.viaggi.maxay.ch\"][uri\"/actuator/threaddump\"][unique_id\"aitkf_8WH99PL6Aots3tuAAAAQE\"]
show less
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show moreWeb application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
{"level":"info","ts":1781185280.8622577,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781185280.8622577,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.179.238.21","remote_port":"40482","client_ip":"34.179.238.21","proto":"HTTP/1.1","method":"GET","host":"baupdate.update.rqponqponmlkjihgbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/heapdump","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 8.0.0; F5321) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000110703,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://baupdate.update.rqponqponmlkjihgbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/heapdump"],"Content-Type":[]}}
{"level":"info","ts":1781185280.874227,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.17
...
show less
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
187 requests with url.path *config.json
131 requests with url.path *secrets.json
123 requests wit ...
show more187 requests with url.path *config.json
131 requests with url.path *secrets.json
123 requests with url.path *config.yml
102 requests with url.path *database.yml
show less