I checked the apache access log and found the following entries
10.9.0.64 - - [04/Sep/2023:11:49:52 +0200] "GET /cli/ws HTTP/1.1" 400 519 "-" "-"
10.9.0.64 - - [04/Sep/2023:11:50:16 +0200] "GET /cli/ws HTTP/1.1" 400 519 "-" "-"
and wehen I tried to access this via curl I got
the error Error 400 only WS connections accepted here
[grafra1969@jenkins-rnd etc]$ curl -v https://abmrndplje002.pass-consulting.com/cli/ws
* About to connect() to abmrndplje002.pass-consulting.com port 443 (#0)
* Trying 10.0.5.8...
* Connected to abmrndplje002.pass-consulting.com (10.0.5.8) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* subject: CN=*.pass-consulting.com
* start date: Oct 05 00:00:00 2022 GMT
* expire date: Nov 05 23:59:59 2023 GMT
* common name: *.pass-consulting.com
* issuer: CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
> GET /cli/ws HTTP/1.1
> User-Agent: curl/7.29.0
> Host: abmrndplje002.pass-consulting.com
> Accept: */*
>
< HTTP/1.1 400 Bad Request
< Date: Mon, 04 Sep 2023 09:53:22 GMT
< Server: Jetty(10.0.15)
< X-Content-Type-Options: nosniff
< Cache-Control: must-revalidate,no-cache,no-store
< Content-Type: text/html;charset=iso-8859-1
< Content-Length: 519
< Connection: close
<
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>Error 400 only WS connections accepted here</title>
</head>
<body><h2>HTTP ERROR 400 only WS connections accepted here</h2>
<table>
<tr><th>URI:</th><td>/cli/ws</td></tr>
<tr><th>STATUS:</th><td>400</td></tr>
<tr><th>MESSAGE:</th><td>only WS connections accepted here</td></tr>
<tr><th>SERVLET:</th><td>Stapler</td></tr>
</table>
<hr/><a href="https://eclipse.org/jetty">Powered by Jetty:// 10.0.15</a><hr/>
</body>
</html>
* Closing connection 0