In case the EVENT_WR-Y-attack-601
warning (Possible attack - {NUM} requests with statuscode 404 within {NUM} seconds) appears frequently, this can have the following causes:
- Bad links inside or outside the application.
- Forceful browsing, especially if all requests come from the same IP address.
- A misconfiguration of Airlock Gateway.
Since unnecessary requests affect the overall system performance, the cause(s) should be addressed soon.
In this case, we do not recommend event adjustment, which could only suppress the symptoms instead of addressing the causes.