[BUG] Blocked requests on stream services are not reported in REPORTS

Author: jojolllCreated May 18, 2026Updated Sep 14, 2026

Labelsbugcorenext major

What happened?

Hi,

On the latest version of BunkerWeb, request blocking on stream services works correctly for most plugins. After placing BunkerWeb in front of most of the ports I need to expose, I noticed a very large number of blocked requests in the logs, much more than for HTTP services.

For example, over a single night, I observed 28 HTTP blocked requests, but several hundred blocked requests on stream services. However, in the REPORTS logs, only the 28 blocked HTTP requests were stored.

I believe every blocked request should be logged in the reports, including those related to stream services.

How to reproduce?

Create a stream service
Block an IP using one of the plugins (DNSBL, Country, etc.)
Check in the logs that the next request is correctly blocked
Observe that no new entry appears in REPORTS

If relevant, I am using Redis (Valkey installed automatically by the interactive installer).

Configuration file(s) (yaml or .env)

yaml

Relevant log output

bash

For example, none of these requests are not in the REPORTS section :

2026/05/18 07:21:49 [warn] 1634#1634: *109422 [PREREAD] denied preread from dnsbl : client IP 81.30.98.53 is in DNSBL cache (server = xbl.spamhaus.org) while prereading client data, client: 81.30.98.53, server: 0.0.0.0:465
2026/05/18 07:21:51 [warn] 1635#1635: *109445 [PREREAD] denied preread from dnsbl : client IP 81.30.98.44 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.44, server: 0.0.0.0:465
2026/05/18 07:22:57 [warn] 1633#1633: *109671 [PREREAD] denied preread from dnsbl : client IP 81.30.98.90 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.90, server: 0.0.0.0:465
2026/05/18 07:22:57 [warn] 1635#1635: *109673 [PREREAD] denied preread from dnsbl : client IP 81.30.98.201 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.201, server: 0.0.0.0:465
2026/05/18 07:23:16 [warn] 1635#1635: *109729 [PREREAD] denied preread from dnsbl : client IP 81.30.98.181 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.181, server: 0.0.0.0:465
2026/05/18 07:23:23 [warn] 1635#1635: *109734 [PREREAD] denied preread from dnsbl : client IP 81.30.98.66 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.66, server: 0.0.0.0:465
2026/05/18 07:24:30 [warn] 1634#1634: *109929 [PREREAD] denied preread from country : client IP 69.5.169.248 is not whitelisted (country = DE) while prereading client data, client: 69.5.169.248, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1634#1634: *109937 [PREREAD] denied preread from country : client IP 193.176.31.249 is not whitelisted (country = NL) while prereading client data, client: 193.176.31.249, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1635#1635: *109939 [PREREAD] denied preread from country : client IP 89.21.67.165 is not whitelisted (country = NL) while prereading client data, client: 89.21.67.165, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1633#1633: *109944 [PREREAD] denied preread from country : client IP 193.176.31.146 is not whitelisted (country = NL) while prereading client data, client: 193.176.31.146, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1633#1633: *109947 [PREREAD] denied preread from country : client IP 89.21.67.173 is not whitelisted (country = NL) while prereading client data, client: 89.21.67.173, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1633#1633: *109949 [PREREAD] denied preread from country : client IP 193.176.31.158 is not whitelisted (country = NL) while prereading client data, client: 193.176.31.158, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1634#1634: *109951 [PREREAD] denied preread from country : client IP 89.21.67.165 is in country cache (blacklisted, country = NL) while prereading client data, client: 89.21.67.165, server: 0.0.0.0:21119
2026/05/18 07:24:36 [warn] 1634#1634: *109942 [PREREAD] denied preread from country : client IP 185.223.235.37 is not whitelisted (country = NL) while prereading client data, client: 185.223.235.37, server: 0.0.0.0:21119
2026/05/18 07:25:42 [warn] 1634#1634: *110133 [PREREAD] denied preread from dnsbl : client IP 62.60.130.59 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 62.60.130.59, server: 0.0.0.0:25
2026/05/18 07:26:17 [warn] 1633#1633: *110305 [PREREAD] denied preread from dnsbl : client IP 81.30.98.33 is in DNSBL cache (server = xbl.spamhaus.org) while prereading client data, client: 81.30.98.33, server: 0.0.0.0:465
2026/05/18 07:26:34 [warn] 1635#1635: *110324 [PREREAD] denied preread from dnsbl : client IP 81.30.98.62 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.62, server: 0.0.0.0:465
2026/05/18 07:30:09 [warn] 1634#1634: *111025 [PREREAD] denied preread from dnsbl : client IP 81.30.98.142 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.142, server: 0.0.0.0:465
2026/05/18 07:31:35 [warn] 1633#1633: *111575 [PREREAD] denied preread from dnsbl : client IP 160.191.242.189 is in DNSBL cache (server = xbl.spamhaus.org) while prereading client data, client: 160.191.242.189, server: 0.0.0.0:25
2026/05/18 07:32:45 [warn] 1633#1633: *111974 [PREREAD] denied preread from country : client IP 172.86.114.38 is in country cache (blacklisted, country = US) while prereading client data, client: 172.86.114.38, server: 0.0.0.0:25565
2026/05/18 07:36:03 [warn] 1634#1634: *112879 [PREREAD] denied preread from dnsbl : IP is blacklisted by bl.blocklist.de while prereading client data, client: 3.129.187.38, server: 0.0.0.0:587
2026/05/18 07:36:03 [warn] 1634#1634: *112888 [PREREAD] denied preread from dnsbl : client IP 3.129.187.38 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 3.129.187.38, server: 0.0.0.0:587
2026/05/18 07:36:04 [warn] 1633#1633: *112889 [PREREAD] denied preread from dnsbl : client IP 3.129.187.38 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 3.129.187.38, server: 0.0.0.0:587
2026/05/18 07:36:28 [warn] 1634#1634: *112972 [PREREAD] denied preread from dnsbl : client IP 81.30.98.47 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.47, server: 0.0.0.0:465
2026/05/18 07:37:34 [warn] 1634#1634: *113217 [PREREAD] denied preread from dnsbl : client IP 81.30.98.77 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.77, server: 0.0.0.0:465
2026/05/18 07:37:47 [warn] 1633#1633: *113250 [PREREAD] denied preread from dnsbl : client IP 81.30.98.207 is in DNSBL cache (server = xbl.spamhaus.org) while prereading client data, client: 81.30.98.207, server: 0.0.0.0:465
2026/05/18 07:38:27 [warn] 1634#1634: *113401 [PREREAD] denied preread from dnsbl : client IP 81.30.98.84 is in DNSBL cache (server = xbl.spamhaus.org) while prereading client data, client: 81.30.98.84, server: 0.0.0.0:465
2026/05/18 07:38:52 [warn] 1635#1635: *113502 [PREREAD] denied preread from dnsbl : client IP 81.30.98.49 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.49, server: 0.0.0.0:465
2026/05/18 07:39:04 [warn] 1634#1634: *113580 [PREREAD] denied preread from dnsbl : client IP 81.30.98.174 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 81.30.98.174, server: 0.0.0.0:465
2026/05/18 07:39:08 [warn] 1634#1634: *113591 [PREREAD] denied preread from dnsbl : client IP 3.129.187.38 is in DNSBL cache (server = bl.blocklist.de) while prereading client data, client: 3.129.187.38, server: 0.0.0.0:587

BunkerWeb version

1.6.10 testing

What integration are you using?

Linux

Linux distribution (if applicable)

Debian 13

Removed private data

I have removed all private data from the configuration file and the logs

Code of Conduct

I agree to follow this project's Code of Conduct

Source: bunkerity/bunkerweb

View original on GitHub View discussion on GitHub