Nextcloud version (eg, 20.0.5): 21.0.4
Operating system and version (eg, Ubuntu 20.04): Ubuntu 20.04
Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.41
PHP version (eg, 7.4): 7.4
I’m facing the problem that out of a sudden, the login process for one user constantly and reproducably pauses for 4 minutes after entering the credentials. Developer tools says the 4 minuts are “Time to first byte”, so the time the browser waits for the first byte of the servers’ answer. This is just for this user the case, my personal one and the admin user work fine.
At first glance, this sounds pretty much like brute force attack prevention. I have
- cleaned the oc_bruteforce_attempts table
- Added relevant IP address to the Brute Force whitelist
- disabled the Brute-force settings app
but to no avail.
Thanks for you help and any hints in advance!
Is this the first time you’ve seen this error? (Y/N): Y
Steps to replicate it:
- Login at the nextcloud instance with that specific user
The output of your Nextcloud log in Admin > Logging:
As you see in the timestamp, the entries are before the login attempt:
{"reqId":"kBvgaMDiZiC1t7Llkbj8","level":1,"time":"2021-08-30T08:45:23+00:00","remoteAddr":"46.5.2.150","user":"admin","app":"no app in context","method":"PROPFIND","url":"/remote.php/webdav","message":"Deprecated event type for {\"[object] (OCP\\SabrePluginEvent)\":{\"*statusCode\":200,\"*message\":\"\",\"*server\":{\"[object] (OCA\\DAV\\Connector\\Sabre\\Server)\":{\"tree\":\"[object] (OCA\\DAV\\Connector\\Sabre\\ObjectTree)\",\"*baseUri\":\"/remote.php/webdav/\",\"httpResponse\":\"[object] (Sabre\\HTTP\\Response)\",\"httpRequest\":\"[object] (Sabre\\HTTP\\Request)\",\"sapi\":\"[object] (Sabre\\HTTP\\Sapi)\",\"*plugins\":[],\"transactionType\":null,\"protectedProperties\":{\"...\":\"Over 20 items, aborting normalization\"},\"debugExceptions\":false,\"resourceTypeMapping\":[],\"enablePropfindDepthInfinity\":true,\"xml\":\"[object] (Sabre\\DAV\\Xml\\Service)\",\"*logger\":null,\"*listeners\":{\"...\":\"Over 20 items, aborting normalization\"},\"*wildcardListeners\":[],\"*listenerIndex\":[]}},\"Symfony\\Contracts\\EventDispatcher\\EventpropagationStopped\":false}}: null","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0","version":"21.0.4.1"}
{"reqId":"NQHTjZJ7P00djtP0ymZZ","level":1,"time":"2021-08-30T08:45:24+00:00","remoteAddr":"46.5.2.150","user":"admin","app":"no app in context","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Deprecated event type for OCP\\IDBConnection::CHECK_MISSING_PRIMARY_KEYS: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0","version":"21.0.4.1"}
{"reqId":"NQHTjZJ7P00djtP0ymZZ","level":1,"time":"2021-08-30T08:45:24+00:00","remoteAddr":"46.5.2.150","user":"admin","app":"no app in context","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Deprecated event type for OCP\\IDBConnection::CHECK_MISSING_INDEXES: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0","version":"21.0.4.1"}
{"reqId":"NQHTjZJ7P00djtP0ymZZ","level":1,"time":"2021-08-30T08:45:25+00:00","remoteAddr":"46.5.2.150","user":"admin","app":"no app in context","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Deprecated event type for OCP\\IDBConnection::CHECK_MISSING_COLUMNS: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0","version":"21.0.4.1"}
The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):
$CONFIG = array (
'instanceid' => 'id',
'passwordsalt' => 'salt',
'secret' => 'secret',
'trusted_domains' =>
array (
0 => 'cloud.domain.de',
1 => 'YYY.76.ZZ.142',
),
'datadirectory' => '/var/www/nextcloud-data',
'dbtype' => 'mysql',
'version' => '21.0.4.1',
'overwrite.cli.url' => 'https://cloud.domain.de',
'dbname' => 'nextcloud',
'dbhost' => 'localhost',
'dbport' => '',
'dbtableprefix' => 'oc_',
'mysql.utf8mb4' => true,
'dbuser' => 'user',
'dbpassword' => 'password',
'installed' => true,
'updater.secret' => 'secret',
'maintenance' => false,
'theme' => '',
'loglevel' => 1,
'log_type' => 'file',
'logfile' => '/var/www/nextcloud/data/nextcloud.log',
'logfilemode' => 416,
'mail_smtpmode' => 'smtp',
'mail_smtpsecure' => 'tls',
'mail_sendmailmode' => 'smtp',
'mail_from_address' => 'cloud',
'mail_domain' => 'domain.de',
'mail_smtpauthtype' => 'LOGIN',
'mail_smtpauth' => 1,
'mail_smtphost' => 'mail.domain.de',
'mail_smtpport' => '25',
'mail_smtpname' => 'cloud@domain.de',
'mail_smtppassword' => 'password',
'auth.bruteforce.protection.enabled' => false,
);
The output of your Apache/nginx/system log in /var/log/____:
XX.YY.2.150 - - [30/Aug/2021:10:57:10 +0200] "-" 408 563 "-" "-"
XX.YY.2.150 - - [30/Aug/2021:10:59:10 +0200] "PUT /index.php/apps/user_status/heartbeat HTTP/1.1" 401 1448 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0"
XX.YY.2.150 - - [30/Aug/2021:10:59:10 +0200] "PUT /index.php/apps/user_status/heartbeat HTTP/1.1" 401 884 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0"
88.ZZZ.39.40 - - [30/Aug/2021:11:00:02 +0200] "GET /cron.php HTTP/1.1" 200 6822 "-" "curl/7.58.0"
XX.YY.2.150 - - [30/Aug/2021:10:56:50 +0200] "POST /index.php/login HTTP/1.1" 303 1858 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/apps/dashboard/ HTTP/1.1" 200 10728 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/css/core/0fff-215a-server.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 20752 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/css/core/0fff-215a-css-variables.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 1653 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/css/notifications/0d6f-215a-styles.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 1841 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/css/dashboard/c108-215a-dashboard.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 1600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:55 +0200] "GET /index.php/css/activity/ce96-215a-style.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 2173 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /index.php/css/text/070a-215a-icons.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 1411 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /index.php/css/user_status/872c-215a-user-status-menu.css?v=29cfe9d9d6486cd0779a9cdbb6686006-ed285b47-9 HTTP/1.1" 200 1245 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /core/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 21756 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/accessibility/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1922 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_sharing/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 6181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/notifications/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 2157 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 6167 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files/js/fileinfomodel.js?v=ed285b47-9 HTTP/1.1" 200 7121 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/activity/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 2852 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/comments/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1645 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/comments/js/comments.js?v=ed285b47-9 HTTP/1.1" 200 3810 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/notifications/js/notifications-main.js?v=ed285b47-9 HTTP/1.1" 200 303278 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files/js/dist/sidebar.js?v=ed285b47-9 HTTP/1.1" 200 187011 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /index.php/js/activity/activity-sidebar.js?v=ed285b47-9 HTTP/1.1" 200 6793 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/comments/js/comments-tab.js?v=ed285b47-9 HTTP/1.1" 200 1612 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_versions/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1743 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_versions/js/files_versions.js?v=ed285b47-9 HTTP/1.1" 200 11857 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/comments/js/comments-app.js?v=ed285b47-9 HTTP/1.1" 200 570069 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_pdfviewer/js/files_pdfviewer-main.js?v=ed285b47-9 HTTP/1.1" 200 10065 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/text/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 2504 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_sharing/js/dist/files_sharing_tab.js?v=ed285b47-9 HTTP/1.1" 200 356367 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/text/js/viewer.js?v=ed285b47-9 HTTP/1.1" 200 10745 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/viewer/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/viewer/js/viewer-main.js?v=ed285b47-9 HTTP/1.1" 200 435412 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /core/js/dist/main.js.map HTTP/1.1" 200 1436884 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/onlyoffice/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 4096 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/onlyoffice/js/viewer.js?v=ed285b47-9 HTTP/1.1" 200 1700 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/onlyoffice/js/listener.js?v=ed285b47-9 HTTP/1.1" 200 1834 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/weather_status/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1756 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/onlyoffice/js/desktop.js?v=ed285b47-9 HTTP/1.1" 200 1409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /core/js/dist/files_fileinfo.js.map HTTP/1.1" 200 35855 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/calendar/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 9294 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/weather_status/js/weather-status.js?v=ed285b47-9 HTTP/1.1" 200 286326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/recommendations/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1015 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/tasks/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 5152 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/calendar/js/dashboard.js?v=ed285b47-9 HTTP/1.1" 200 411513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/recommendations/js/dashboard.js?v=ed285b47-9 HTTP/1.1" 200 179424 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /core/js/dist/files_client.js.map HTTP/1.1" 200 183343 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/user_status/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/files_rightclick/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1151 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/user_status/js/dashboard.js?v=ed285b47-9 HTTP/1.1" 200 269323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/firstrunwizard/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 5073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:56 +0200] "GET /apps/tasks/js/tasks-dashboard.js?v=ed285b47-9 HTTP/1.1" 200 834665 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/accessibility/js/accessibilityoca.js.map HTTP/1.1" 200 17171 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/firstrunwizard/js/about.js?v=ed285b47-9 HTTP/1.1" 200 965 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/files_sharing/js/dist/main.js.map HTTP/1.1" 200 3147 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/theming/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 2293 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" 200 1009 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/files_videoplayer/js/main.js.map HTTP/1.1" 200 8745 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/user_status/js/user-status-menu.js?v=ed285b47-9 HTTP/1.1" 200 157690 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/dashboard/l10n/de.js?v=ed285b47-9 HTTP/1.1" 200 1420 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/dashboard/js/dashboard.js?v=ed285b47-9 HTTP/1.1" 200 171028 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /core/js/dist/unified-search.js?v=ed285b47-9 HTTP/1.1" 200 161987 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/user_status/img/app.svg?v=ed285b47 HTTP/1.1" 200 1027 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/settings/img/admin.svg?v=ed285b47 HTTP/1.1" 200 846 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/settings/img/apps.svg?v=ed285b47 HTTP/1.1" 200 774 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/notifications/js/notifications-main.js.map?v=fffd673020a23407feef HTTP/1.1" 200 914613 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:57 +0200] "GET /apps/firstrunwizard/img/info.svg?v=ed285b47 HTTP/1.1" 200 985 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/settings/img/users.svg?v=ed285b47 HTTP/1.1" 200 1449 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/settings/img/help.svg?v=ed285b47 HTTP/1.1" 200 1130 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/dashboard/img/dashboard.svg?v=ed285b47 HTTP/1.1" 200 1066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /core/img/actions/logout.svg?v=ed285b47 HTTP/1.1" 200 953 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/files/img/app.svg?v=ed285b47 HTTP/1.1" 200 832 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/photos/img/app.svg?v=ed285b47 HTTP/1.1" 200 1104 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/activity/img/activity.svg?v=ed285b47 HTTP/1.1" 200 827 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /index.php/apps/onlyoffice/ajax/settings HTTP/1.1" 200 1462 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/calendar/img/calendar.svg?v=ed285b47 HTTP/1.1" 200 1430 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/contacts/img/app.svg?v=ed285b47 HTTP/1.1" 200 3436 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/tasks/img/tasks.svg?v=ed285b47 HTTP/1.1" 200 1277 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/files/js/dist/sidebar.js.map HTTP/1.1" 200 615400 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/comments/js/comments.js.map HTTP/1.1" 200 8858 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/comments/js/comments-tab.js.map HTTP/1.1" 200 3574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/files_pdfviewer/js/files_pdfviewer-main.js.map?v=34ca42b64d1470fcac17 HTTP/1.1" 200 36768 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/files_versions/js/files_versions.js.map HTTP/1.1" 200 66106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/text/js/viewer.js.map HTTP/1.1" 200 21489 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/files_sharing/js/dist/files_sharing_tab.js.map HTTP/1.1" 200 865899 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/comments/js/comments-app.js.map HTTP/1.1" 200 1604358 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/viewer/js/viewer-main.js.map?v=8c7219564e5876ca9ad5 HTTP/1.1" 200 1195234 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /apps/weather_status/js/weather-status.js.map?v=07a483c4fd81e07b48a7 HTTP/1.1" 200 768163 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:58 +0200] "GET /index.php/apps/recommendations/api/recommendations/always HTTP/1.1" 200 1224 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "GET /apps/recommendations/js/dashboard.js.map HTTP/1.1" 200 577255 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "PUT /index.php/apps/user_status/heartbeat HTTP/1.1" 204 772 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "GET /apps/calendar/js/dashboard.js.map HTTP/1.1" 200 1238605 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "GET /apps/tasks/js/tasks-dashboard.js.map?v=5c0f0a546ffb2551992e HTTP/1.1" 200 2040650 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "GET /ocs/v2.php/search/providers?from=%2Fapps%2Fdashboard%2F HTTP/1.1" 200 1108 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "GET /ocs/v2.php/apps/weather_status/api/v1/location HTTP/1.1" 200 958 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:00:59 +0200] "PROPFIND /remote.php/dav/ HTTP/1.1" 207 1074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "PUT /index.php/apps/user_status/heartbeat HTTP/1.1" 204 772 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /ocs/v2.php/apps/user_status/api/v1/user_status HTTP/1.1" 200 1005 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "PROPFIND /remote.php/dav/principals/users/Pauli/ HTTP/1.1" 207 1748 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /ocs/v2.php/apps/weather_status/api/v1/favorites HTTP/1.1" 200 936 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /ocs/v2.php/apps/user_status/api/v1/user_status HTTP/1.1" 200 1005 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "PROPFIND /remote.php/dav/calendars/Pauli/ HTTP/1.1" 207 2878 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /apps/user_status/js/user-status-menu.js.map?v=80b316204b35f99a6c28 HTTP/1.1" 200 483073 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /apps/user_status/js/dashboard.js.map?v=5660a0c6381aa41827a2 HTTP/1.1" 200 727503 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/jugendleitung/ HTTP/1.1" 207 4007 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/personal/ HTTP/1.1" 207 12254 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/sgulm/ HTTP/1.1" 207 5439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/shne/ HTTP/1.1" 207 4765 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /apps/dashboard/js/dashboard.js.map HTTP/1.1" 200 555439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/jugendleitung/ HTTP/1.1" 207 925 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/personal/ HTTP/1.1" 207 925 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/sgulm/ HTTP/1.1" 207 4887 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "REPORT /remote.php/dav/calendars/Pauli/shne/ HTTP/1.1" 207 925 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:00 +0200] "GET /core/js/dist/unified-search.js.map HTTP/1.1" 200 513940 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:01 +0200] "GET /apps/calendar/js/chunks/calendar.23.2c46e066dfec9a5a016b.js.map HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
XX.YY.2.150 - - [30/Aug/2021:11:01:02 +0200] "GET /index.php/apps/photos/service-worker.js HTTP/1.1" 200 6036 "https://cloud.sgulm.de/index.php/apps/photos/service-worker.js" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"