Please someone help me. Where does this warning come from?What can I do to stop this warning?
Logger: homeassistant.components.http.security_filter
Source: components/http/security_filter.py:54
Integration: HTTP (documentation, issues)
First occurred: 27 септември 2021 г., 3:39:00 ч. (6 occurrences)
Last logged: 27 септември 2021 г., 21:37:06 ч.
Filtered a request with a potential harmful query string: /wp-json/wc/store/products/collection-data?calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500
Filtered a request with a potential harmful query string: /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500
Filtered a request with a potential harmful query string: /manager/radius/server_ping.php?ip=127.0.0.1|cat%20/etc/passwd>…/…/poc.txt&id=1
Filtered a request with a potential harmful query string: /lucee/admin/imgProcess.cfm?file=/…/…/…/context/1yh9eqZmxDgvUZcClbmULOpAUSw.cfm
Filtered a request with a potential harmful query string: /remote/fgt_lang?lang=/…/…/…/…//////////dev/cmdb/sslvpn_websession
System Health
version: core-2021.9.7
installation_type: Home Assistant OS
dev: false
hassio: true
docker: true
user: root
virtualenv: false
python_version: 3.9.7
os_name: Linux
os_version: 5.10.62
arch: x86_64
timezone: Europe/Sofia
GitHub API: ok
Github API Calls Remaining: 5000
Installed Version: 1.15.2
Stage: running
Available Repositories: 882
Installed Repositories: 7
logged_in: false
can_reach_cert_server: ok
can_reach_cloud_auth: ok
can_reach_cloud: ok
host_os: Home Assistant OS 6.4
update_channel: stable
supervisor_version: supervisor-2021.09.4
docker_version: 20.10.7
disk_total: 30.8 GB
disk_used: 2.9 GB
healthy: true
supported: true
board: ova
supervisor_api: ok
version_api: ok
installed_addons: File editor (5.3.3), Duck DNS (1.13.0), Terminal & SSH (9.1.3), Samba share (9.5.1), NGINX Home Assistant SSL proxy (3.0.2), Dnsmasq (1.4.4)
Thanks for the reply:slightly_smiling_face:. I need an alternative method to Nabu Casa. Can you tell me which add-on I need to use to set up HA, (tell me only the names) not to use port forwarding and to have external and internal access to the system. I don’t understand much about server systems. I use forums and video tutorials on how to set up HA. Thank you in advance for the information
Definitely do not have any port forwarding set up sir.
And when I did, they were never pointed to my HA…always had Nabu Casa.
I recently setup Tailscale to remove the only port forwarding I had (for Wireguard…port fwded to another server,not HA).
There is. When I had this issue shortly after migrating from DuckDNS to Nabu Casa I mirrored the switch port connect to Home Assistant to another free port on my network switch. I then connected a laptop to this port and ran Wireshark to capture all the packets sent to and from Home Assistant.
What I discovered was that while I had removed the port forward rules in my router I had forgotten to save the configuration. So the ports were still open. This is why I asked you to check again.
I was hoping there was a way to see the IP that created the initial security alert in the logs. Guess that may not be possible so I’m not sure how to proceed.