search

bunkerity / bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)
https://www.bunkerweb.io
GNU Affero General Public License v3.0
6.52k stars 365 forks source link

[BUG] whitelist bypass not effective #959

Closed chrismade closed 7 months ago

chrismade commented 8 months ago

What happened?

I'm trying to bypass nextcloud 28 internal traffic to avoid "bad behaviour" bans - which would led to collabora not working any more. unlike #922 which was concluded that whitelist bypass is not working for standalone server I'd rather assume it is not working in multisite as well - expected behaviour is that any bypass rule - global or site-specific - by IP address, by CIDR network pattern (e.g. 0.0.0.0/0), by RDNS pattern or by User Agent pattern should bypass any rule checking and should not lead to ban this traffic due to bad behaviour

note: in config file and logfiles I replaced the the real domainname by "example.com" and the real IP address by 88.77.53.190

How to reproduce?

It should be easy to reproduce - just create a simple multisite setup e.g. with "www" and "nxcloud" - I assume it is not even necessary to forward this traffic or use websockets to reproduce - then try to use any whitelist based on network, single IP, UserAgent or RDNS and check logfiles on level INFO if there is any bypass or full evaluation of traffic. You may want to create some requests which trigger "bad behavior" to see the IP is banned soon thereafter

Configuration file(s) (yaml or .env)

version: "3.5"

services:

  bunkerweb:
    image: bunkerity/bunkerweb:1.5.5
    ports:
      - 8080:8080
      - 8443:8443
    labels:
      - "bunkerweb.INSTANCE=yes"
    environment:
      - DNS_RESOLVERS=8.8.8.8 8.8.4.4
      - LOG_LEVEL=info
      - USE_IPV6=yes
      - API_WHITELIST_IP=127.0.0.0/8 10.20.30.0/24
      - USE_WHITELIST=yes
      - WHITELIST_IP=88.77.53.190
      - MULTISITE=yes
      - SERVER_NAME=nxcloud.example.com www.example.com
      - www.example.com_SERVER_NAME=www.example.com
      - nxcloud.example.com_SERVER_NAME=nxcloud.example.com
      - nxcloud.example.com_AUTO_LETS_ENCRYPT=yes
      - nxcloud.example.com_EMAIL_LETS_ENCRYPT=privacy@example.com
      - nxcloud.example.com_USE_LETS_ENCRYPT_STAGING=yes
      - nxcloud.example.com_USE_WHITELIST=yes
      - nxcloud.example.com_WHITELIST_IP=88.77.53.190
      - nxcloud.example.com_WHITELIST_RDNS=.example.com
      - nxcloud.example.com_WHITELIST_USER_AGENT=.*extcloud.*
      - nxcloud.example.com_MAX_CLIENT_SIZE=10G
      - nxcloud.example.com_ALLOWED_METHODS=GET|POST|HEAD|COPY|DELETE|LOCK|MKCOL|MOVE|PROPFIND|PROPPATCH|PUT|REPORT|UNLOCK|OPTIONS
      - nxcloud.example.com_X_FRAME_OPTIONS=SAMEORIGIN
      - nxcloud.example.com_USE_REVERSE_PROXY=yes
      - nxcloud.example.com_REVERSE_PROXY_URL=/
      - nxcloud.example.com_REVERSE_PROXY_HOST=http://192.168.54.15:11000
      - nxcloud.example.com_LIMIT_REQ_RATE=99r/s
      - nxcloud.example.com_USE_CLIENT_CACHE=yes
      - nxcloud.example.com_USE_GZIP=yes
      - nxcloud.example.com_REVERSE_PROXY_WS=yes
      - www.example.com_SERVER_NAME=www.example.com
      - www.example.com_AUTO_LETS_ENCRYPT=yes
      - www.example.com_EMAIL_LETS_ENCRYPT=privacy@example.com
      - www.example.com_USE_LETS_ENCRYPT_STAGING=yes
      - |
        CUSTOM_CONF_MODSEC_CRS_nextcloud=
        SecAction \
         "id:900130,\
          phase:1,\
          nolog,\
          pass,\
          t:none,\
          setvar:tx.crs_exclusions_nextcloud=1"
        # WebDAV
        SecAction \
         "id:900200,\
          phase:1,\
          nolog,\
          pass,\
          t:none,\
         setvar:'tx.allowed_methods=GET POST HEAD COPY DELETE LOCK MKCOL MOVE PROPFIND PROPPATCH PUT REPORT UNLOCK OPTIONS'"
      - |
        CUSTOM_CONF_MODSEC_nextcloud=
        SecRule REQUEST_FILENAME "@rx ^/remote.php/dav/files/" "id:2000,ctl:ruleRemoveByTag=attack-protocol,ctl:ruleRemoveByTag=attack-generic,nolog"
    volumes:
      - www:/var/www/html
    networks:
      - bw-universe
      - bw-services
    restart: always

  bw-scheduler:
    image: bunkerity/bunkerweb-scheduler:1.5.5
    depends_on:
      - bunkerweb
      - bw-docker
    volumes:
      - bw-data:/data
    environment:
      - DOCKER_HOST=tcp://bw-docker:2375
    networks:
      - bw-universe
      - bw-docker
    restart: always

  bw-docker:
    image: tecnativa/docker-socket-proxy:nightly
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - CONTAINERS=1
      - LOG_LEVEL=warning
    networks:
      - bw-docker
    restart: always

volumes:
  bw-data:
  www:

networks:
  bw-universe:
    name: bw-universe
    ipam:
      driver: default
      config:
        - subnet: 10.20.30.0/24
  bw-docker:
    name: bw-docker
  bw-services:
    name: bw-services
    enable_ipv6: true
    ipam:
      config:
        - subnet: fd00:13:37::/48
          gateway: fd00:13:37::1

Relevant log output

2024/02/26 13:52:00 [info] 561#561: *1210 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:53:00 [info] 561#561: *1260 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:54:01 [info] 562#562: *1279 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:55:01 [info] 562#562: *1297 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:56:01 [info] 562#562: *1314 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:57:02 [info] 562#562: *1331 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts.json", host: "nxcloud.example.com"
2024/02/26 13:57:40 [info] 563#563: *1346 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "OPTIONS /remote.php/dav/principals/users/georg/ HTTP/2.0", upstream: "http://192.168.54.15:11000/remote.php/dav/principals/users/georg/", host: "nxcloud.example.com"
...
2024/02/26 14:37:21 [info] 3778#3778: *2193 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "REPORT /remote.php/dav/addressbooks/users/georg/z-server-generated--system/ HTTP/2.0", host: "nxcloud.example.com"
2024/02/26 14:37:21 [info] 3778#3778: *2195 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "PROPFIND /remote.php/dav/addressbooks/users/georg/z-app-generated--contactsinteraction--recent/ HTTP/2.0", host: "nxcloud.example.com"
2024/02/26 14:37:21 [info] 3778#3778: *2197 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/capabilities HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 14:38:17 [info] 3779#3779: *2212 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 14:38:46 [info] 3779#3779: *2227 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/capabilities HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 14:39:17 [info] 3779#3779: *2237 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 14:40:02 [info] 3779#3779: *2252 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/capabilities HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 14:40:18 [info] 3779#3779: *2256 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts.json HTTP/1.1", host: "nxcloud.example.com"

2024/02/26 13:51:32 [notice] 564#564: *1122 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (2/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:32 [notice] 564#564: *1124 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (3/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:34 [notice] 564#564: *1137 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (4/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:36 [notice] 564#564: *1142 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (5/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:37 [notice] 564#564: *1151 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (6/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:37 [notice] 564#564: *1153 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (7/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:37 [notice] 564#564: *1157 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (8/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:38 [notice] 561#561: *1166 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (9/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:39 [notice] 561#561: *1171 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (10/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:43 [warn] 561#561: *1180 [BADBEHAVIOR] IP 88.77.53.190 is banned for 86400s (11/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:51:43 [notice] 561#561: *1180 [BADBEHAVIOR] increased counter for IP 88.77.53.190 (11/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:30 [notice] 564#564: *1239 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (10/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:32 [notice] 564#564: *1240 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (9/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:32 [notice] 564#564: *1242 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (8/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:34 [notice] 564#564: *1244 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (7/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:36 [notice] 564#564: *1246 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (6/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 13:52:37 [notice] 564#564: *1247 [BADBEHAVIOR] decreased counter for IP 88.77.53.190 (5/10), context: ngx.timer, client: 88.77.53.190, server: 0.0.0.0:8443

BunkerWeb version

1.5.5

What integration are you using?

Docker

Linux distribution (if applicable)

debian12

Removed private data

Code of Conduct

chrismade commented 8 months ago

for the time being I had to create a cronjob which is running every minute to trigger bwcli unban to avoid another ban of this IP address and prevent collabora to stop working (dirty fix)

note#1 - nextcloud 28 is using HTTP method REPORT in webdav calls now - which seems to be new - this method is not yet included into the sample files for bunkerweb as "allowed"

note#2 (as always) I seems I'm not smart enough to discover WHY bunkerweb is considering the nextcloud internal traffic as "bad behaviour" by digesting logfiles in INFO level - and fixing the root cause - it would be very helpful if this could be seen (more clearly) in logfiles which rule/violation led to mark it as "bad behaviour"

TheophileDiot commented 8 months ago

Hi, sorry for the late response. Thank you for opening this issue, could you send the logs when the 403 (or other bad behavior status code) occurred ? Thanks :pray:

fl0ppy-d1sk commented 8 months ago

Hello @chrismade,

Yep we need access logs from 88.77.53.190

chrismade commented 8 months ago

I selected a single second from the logfiles where the issue appears pretty much in the middle:

first the access log (stdout):

nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0" 200 2753 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0" 200 2611 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0" 200 1999 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0" 200 2020 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0" 200 2314 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0" 200 2709 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0" 200 2323 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0" 200 1939 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0" 200 2306 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "POST /apps/notify_push/pre_auth HTTP/2.0" 200 32 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0" 200 2184 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0" 200 2152 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 88.77.53.190 - - [26/Feb/2024:23:52:04 +0000] "GET /hosting/discovery HTTP/1.1" 403 89809 "-" "Nextcloud Server Crawler"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0" 200 2100 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /ocs/v2.php/apps/user_status/api/v1/user_status HTTP/2.0" 200 149 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/PlayfairDisplay-wght.ttf/overview HTTP/2.0" 200 2528 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/RobotoMono-wght.ttf/overview HTTP/2.0" 200 2523 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "PUT /ocs/v2.php/apps/user_status/api/v1/heartbeat?format=json HTTP/2.0" 200 149 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Montserrat-wght.ttf/overview HTTP/2.0" 200 1943 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/check HTTP/2.0" 500 184185 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /apps/richdocuments/settings/fonts/Lora-wght.ttf/overview HTTP/2.0" 200 2686 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
nxcloud.example.com 71.1.37.28 - - [26/Feb/2024:23:52:04 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 200 1213 "https://nxcloud.example.com/settings/admin/richdocuments" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"

then the error.log (stderr):

2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Pacifico-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Comfortaa-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Caveat-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] ssl_certificate phase started, context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] calling ssl_certificate() methods of plugins ..., context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] customcert:ssl_certificate() call successful : custom certificate is not used, context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] letsencrypt:ssl_certificate() call successful : certificate/key data found, context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] letsencrypt is setting certificate/key : certificate/key data found, context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5556 [SSL-CERTIFICATE] certificate set by letsencrypt, context: ssl_certificate_by_lua*, client: 88.77.53.190, server: 0.0.0.0:8443
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lexend-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Lobster-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/EBGaramond-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Oswald-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/AmaticSC-Bold.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "POST /apps/notify_push/pre_auth HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/notify_push/pre_auth", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Roboto-wdtg-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] ssl_certificate phase started, context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] calling ssl_certificate() methods of plugins ..., context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] customcert:ssl_certificate() call successful : custom certificate is not used, context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] letsencrypt:ssl_certificate() call successful : certificate/key data found, context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] letsencrypt is setting certificate/key : certificate/key data found, context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [info] 10300#10300: *5558 [SSL-CERTIFICATE] certificate set by letsencrypt, context: ssl_certificate_by_lua*, client: 71.1.37.28, server: 0.0.0.0:8443
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Nunito-wght.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] set phase started, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] filling ngx.ctx ..., client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] ngx.ctx filled (ret = ctx filled), client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] calling set() methods of plugins ..., client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] sessions:set() call successful : success, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuaMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comip71.1.37.28 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuri/push/ws = 2, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] whitelist:set() call successful : not in whitelist cache, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [SET] called set() methods of plugins, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] access phase started, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] filling ngx.ctx ..., client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] ngx.ctx filled (ret = ctx filled), client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] IP 71.1.37.28 is not banned, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] calling access() methods of plugins ..., client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuaMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comip71.1.37.28 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuri/push/ws = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] whitelist:access() call successful : not whitelisted, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] letsencrypt:access() call successful : success, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_blacklist_nxcloud.example.comuaMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_blacklist_nxcloud.example.comip71.1.37.28 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_blacklist_nxcloud.example.comuri/push/ws = 2, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] blacklist:access() call successful : not blacklisted, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] greylist:access() call successful : access not needed, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] country:access() call successful : country not activated, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [CACHESTORE] hit level for plugin_dnsbl_nxcloud.example.com71.1.37.28 = 1, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] dnsbl:access() call successful : client IP 71.1.37.28 is in DNSBL cache (not blacklisted), client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] bunkernet:access() call successful : not in db, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] reversescan:access() call successful : reverse scan not activated, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] limit:access() call successful : client IP 71.1.37.28 is not limited for URL /push/ws (current rate = 1r/s and max rate = 99r/s), client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] misc:access() call successful : method GET is allowed, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] cors:access() call successful : service doesn't use CORS, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] antibot:access() call successful : antibot not activated, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] called access() methods of plugins, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [ACCESS] access phase ended, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5557 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /push/ws HTTP/1.1", upstream: "http://192.168.54.15:11000/push/ws", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] set phase started, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] filling ngx.ctx ..., client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] ngx.ctx filled (ret = ctx filled), client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] calling set() methods of plugins ..., client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] sessions:set() call successful : success, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuaNextcloud Server Crawler = 3, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comip88.77.53.190 = 3, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [CACHESTORE] hit level for plugin_whitelist_nxcloud.example.comuri/hosting/discovery = 3, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] whitelist:set() call successful : not in whitelist cache, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [SET] called set() methods of plugins, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [ACCESS] access phase started, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [ACCESS] filling ngx.ctx ..., client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [ACCESS] ngx.ctx filled (ret = ctx filled), client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [warn] 10300#10300: *5555 [ACCESS] IP 88.77.53.190 is banned with reason bad behavior (84348.701s remaining), client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [ACCESS] skipped access phase because request is internal, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] header phase started, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] filling ngx.ctx ..., client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] ngx.ctx filled (ret = ctx filled), client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] calling header() methods of plugins ..., client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] antibot:header() call successful : antibot not activated, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] cors:header() call successful : service doesn't use CORS, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] headers:header() call successful : edited headers for request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [HEADER] called header() methods of plugins, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] log phase started while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] filling ngx.ctx ... while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] calling log() methods of plugins ... while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] badbehavior:log() call successful : already banned while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [CACHESTORE] hit level for plugin_bunkernet_88.77.53.190_bad behavior = 1 while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] bunkernet:log() call successful : already reported recently while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] called log() methods of plugins while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] client was denied with reason bad behavior and data = {} while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [info] 10300#10300: *5555 [LOG] log phase ended while logging request, client: 88.77.53.190, server: nxcloud.example.com, request: "GET /hosting/discovery HTTP/1.1", host: "nxcloud.example.com"
2024/02/26 23:52:04 [warn] 10300#10300: *5468 upstream sent duplicate header line: "Server: Apache/2.4.58 (Unix)", previous value: "Server: Caddy", ignored while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] header phase started while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] filling ngx.ctx ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] ngx.ctx filled (ret = ctx filled) while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] calling header() methods of plugins ... while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] antibot:header() call successful : antibot not activated while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] cors:header() call successful : service doesn't use CORS while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] headers:header() call successful : edited headers for request while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [HEADER] called header() methods of plugins while reading response header from upstream, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase started while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] filling ngx.ctx ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] ngx.ctx filled (ret = ctx filled) while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] calling log() methods of plugins ... while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] badbehavior:log() call successful : not increasing counter while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] bunkernet:log() call successful : ip is not blocked while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] called log() methods of plugins while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"
2024/02/26 23:52:04 [info] 10300#10300: *5468 [LOG] log phase ended while logging request, client: 71.1.37.28, server: nxcloud.example.com, request: "GET /apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview HTTP/2.0", upstream: "http://192.168.54.15:11000/apps/richdocuments/settings/fonts/Spectral-Regular.ttf/overview", host: "nxcloud.example.com", referrer: "https://nxcloud.example.com/settings/admin/richdocuments"

if needed I can also send the unmodified complete logfiles on a secure channel - let me know if this is needed and to which target I can upload the files?

fl0ppy-d1sk commented 8 months ago

Looks like we had a bug introduced in 1.5.5 regarding the whitelisting feature. It will be fixed in the next release !

fl0ppy-d1sk commented 7 months ago

Hello @chrismade,

Fix should be available on the testing version, more info here : https://docs.bunkerweb.io/testing/

Don't hesitate to test it and tell us if everything is ok !

fl0ppy-d1sk commented 7 months ago

Hello @chrismade,

Fix is now available in the v1.5.6 release. Thanks for your feedback !