Closed
Description
I have gotten a report about a file content being duplicated. Checking the file and when this happend I've seen the following access log
Save highlighted and some possibly suspicious large pushs
- [26/Feb/2024:17:37:35 +0000] "PUT /apps/text/session/8319994/create HTTP/1.1" 200 2072 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 326482
- [26/Feb/2024:17:37:36 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 4561 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 298094
- [26/Feb/2024:17:37:36 +0000] "PUT /apps/text/session/8319994/create HTTP/1.1" 200 5425 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 262602
- [26/Feb/2024:17:37:37 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 4755 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 240192
- [26/Feb/2024:17:37:37 +0000] "POST /apps/text/session/8319994/close HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 258176
- [26/Feb/2024:17:37:37 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 4757 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 196571
- [26/Feb/2024:17:37:38 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 4523 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 306216
- [26/Feb/2024:17:37:38 +0000] "PUT /apps/text/session/8319994/create HTTP/1.1" 200 5464 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 81013
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 69689
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 45801
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 4899 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 62027
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 4561 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 81717
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 66798
- [26/Feb/2024:17:37:39 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 328458
- [26/Feb/2024:17:37:40 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 279224
- [26/Feb/2024:17:37:41 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 2068 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 87629
- [26/Feb/2024:17:37:41 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 1742 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 307328
- [26/Feb/2024:17:37:42 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 104200
- [26/Feb/2024:17:37:42 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 2030 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 256682
- [26/Feb/2024:17:37:42 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 83362
- [26/Feb/2024:17:37:43 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 299109
- [26/Feb/2024:17:37:44 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 114591
- [26/Feb/2024:17:37:44 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 76026
- [26/Feb/2024:17:37:46 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 277595
- [26/Feb/2024:17:37:47 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 101590
- [26/Feb/2024:17:37:49 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 93880
- [26/Feb/2024:17:37:52 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 102879
- [26/Feb/2024:17:37:54 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 98642
- [26/Feb/2024:17:37:55 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 53642
- [26/Feb/2024:17:37:55 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 239371
- [26/Feb/2024:17:37:56 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 71583
- [26/Feb/2024:17:37:57 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 68970
- [26/Feb/2024:17:37:58 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1222 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 286465
- [26/Feb/2024:17:37:59 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1222 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 98738
- [26/Feb/2024:17:38:03 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1222 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 289593
- [26/Feb/2024:17:38:05 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1184 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 160587
- [26/Feb/2024:17:38:08 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 131273
- [26/Feb/2024:17:38:08 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 386638
- [26/Feb/2024:17:38:07 +0000] "POST /apps/text/session/8319994/save HTTP/1.1" 200 909 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 1555208 - [26/Feb/2024:17:38:09 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1181 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 101480
- [26/Feb/2024:17:38:09 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 243807
- [26/Feb/2024:17:38:10 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 259059
- [26/Feb/2024:17:38:10 +0000] "POST /apps/text/session/8319994/close HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 54200
- [26/Feb/2024:17:38:10 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 70175
- [26/Feb/2024:17:38:14 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1206 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 280950
- [26/Feb/2024:17:38:19 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1168 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 258116
- [26/Feb/2024:17:38:25 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 252346
- [26/Feb/2024:17:38:25 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1168 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 99631
- [26/Feb/2024:17:38:30 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1206 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 94824
- [26/Feb/2024:17:38:36 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1206 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 104128
- [26/Feb/2024:17:38:40 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 63247
- [26/Feb/2024:17:38:41 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1055 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 281592
- [26/Feb/2024:17:38:47 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1055 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 77930
- [26/Feb/2024:17:38:52 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1055 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 98535
- [26/Feb/2024:17:38:55 +0000] "POST /apps/text/session/8319994/push HTTP/1.1" 200 804 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 253980
- [26/Feb/2024:17:38:57 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1170 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 82322
- [26/Feb/2024:17:39:03 +0000] "POST /apps/text/session/8319994/sync HTTP/1.1" 200 1170 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 296501
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Metadata
Assignees
Labels
Type
Projects
Status
☑️ Done