Abnormal access status to upstream server: Get 1.2.3.4: net/http: timeout awaiting response

I have a web server that is working fine through Safeline but I have this error.

"Abnormal access status to upstream server: Get 10.20.30.4: net/http: timeout awaiting response headers"

I will test tonight when traffic is light but I'm wondering this these lines in my Apache config may be causing the issue:

Header unset Server
ServerSignature Off
ServerTokens Prod

Just thought about those as I was submitting but figured I'd post anyway in case this helps others. I will test later and post any updates.

UPDATE: I removed those from the config but am still received this error. I is related to the upstream health check but I'm not sure why it's failing. I have multiple sites on the same server and they do not display this error.

Any updates on this? This seems to randomly show up on all my sites/applications I have on one server. Sometimes it shows the green check and others it shows the error. I'm running Apache on Alma Linux 10 with SELINUX enabled if that helps. Safeline is installed on the same network. All sites function fine, they just display the error.

On a side note, I have another server set up the same way running one site and I do not get this message on it.

Since overall services are not experiencing any anomalies, does that mean the backend application is receiving health-check probe logs from the WAF? Could you provide those logs? Meanwhile, you can run the following command on a machine within the same network segment to check the response latency:
curl -v -w "\nTime_Total: %{time_total}\n" http://10.20.30.4/

I have the same issue: I have 3 website, 1 website ok, but 2 website have alert "Get "https://163.61.72.68:8443": http2: timeout awaiting response headers"
My log:
195.178.110.105 | - | 06/May/2026:03:41:15 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10139 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"195.178.110.105 | - | 06/May/2026:03:41:15 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10140 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"195.178.110.105 | - | 06/May/2026:03:41:15 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10140 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"195.178.110.105 | - | 06/May/2026:03:41:15 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10140 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"195.178.110.105 | - | 06/May/2026:03:41:15 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10141 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"195.178.110.105 | - | 06/May/2026:03:41:16 +0000 | "vtheme.us" | "POST / HTTP/2.0" | 403 | 10140 | "-" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"3.70.164.132 | - | 06/May/2026:03:42:13 +0000 | "vtheme.us" | "GET /wp-login.php HTTP/2.0" | 200 | 3506 | "-" | "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Tablet PC 2.0; Creative AutoUpdate v1.40.01)"3.70.164.132 | - | 06/May/2026:03:42:16 +0000 | "vtheme.us" | "POST /wp-login.php HTTP/2.0" | 200 | 3650 | "https://vtheme.us/wp-login.php" | "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Tablet PC 2.0; Creative AutoUpdate v1.40.01)"216.244.66.194 | - | 06/May/2026:03:42:23 +0000 | "vtheme.us" | "GET /tu-khoa/payment-gateway/ HTTP/1.1" | 200 | 58792 | "-" | "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"195.164.49.144 | - | 06/May/2026:03:42:25 +0000 | "vtheme.us" | "GET / HTTP/1.1" | 200 | 23730 | "-" | "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Mobile/15E148 Safari/604.1"185.225.69.232 | - | 06/May/2026:03:42:31 +0000 | "vtheme.us" | "GET /bank_orlen_pl1/ HTTP/1.1" | 404 | 11908 | "-" | "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Mobile/15E148 Safari/604.1"54.38.147.216 | - | 06/May/2026:03:43:40 +0000 | "vtheme.us" | "GET /san-pham/psychare-wordpress-theme-for-psychologists-life-coaches/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"101.33.81.73 | - | 06/May/2026:03:43:56 +0000 | "vtheme.us" | "GET / HTTP/1.1" | 301 | 216 | "-" | "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"101.33.81.73 | - | 06/May/2026:03:43:58 +0000 | "vtheme.us" | "GET / HTTP/1.1" | 301 | 20 | "http://vtheme.us" | "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"101.33.81.73 | - | 06/May/2026:03:44:00 +0000 | "vtheme.us" | "GET / HTTP/1.1" | 200 | 23730 | "https://vtheme.us:443/" | "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"103.232.122.132 | - | 06/May/2026:03:44:01 +0000 | "vtheme.us" | "POST /xmlrpc.php HTTP/2.0" | 200 | 261 | "-" | "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0; i-Macros-Web-Automation) like Gecko"95.108.213.175 | - | 06/May/2026:03:45:21 +0000 | "vtheme.us" | "GET /robots.txt HTTP/1.1" | 200 | 365 | "-" | "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"5.255.231.61 | - | 06/May/2026:03:45:24 +0000 | "vtheme.us" | "GET /lt-comuser-communications-wordpress-theme/ HTTP/1.1" | 404 | 11915 | "-" | "Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots)"54.38.147.190 | - | 06/May/2026:03:45:43 +0000 | "vtheme.us" | "GET /san-pham/webteck-it-solution-and-technology-html-template/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"68.183.200.74 | - | 06/May/2026:03:46:24 +0000 | "vtheme.us" | "POST /wp-login.php HTTP/1.1" | 200 | 11462 | "-" | "Mozilla/5.0"51.195.183.225 | - | 06/May/2026:03:47:38 +0000 | "vtheme.us" | "GET /san-pham/betterlinks-pro-shorten-track-and-manage-any-url/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"198.244.226.66 | - | 06/May/2026:03:49:42 +0000 | "vtheme.us" | "GET /san-pham/vankine-insurance-consulting-business-wordpress-theme/ HTTP/2.0" | 404 | 11930 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"43.130.131.18 | - | 06/May/2026:03:50:58 +0000 | "vtheme.us" | "GET /san-pham/mau-landing-page-bat-dong-san-pinevalley/ HTTP/1.1" | 200 | 17193 | "-" | "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"50.6.224.46 | - | 06/May/2026:03:51:20 +0000 | "vtheme.us" | "GET /wp-login.php HTTP/2.0" | 200 | 3506 | "-" | "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; yie9; rv:11.0) like Gecko"50.6.224.46 | - | 06/May/2026:03:51:22 +0000 | "vtheme.us" | "POST /wp-login.php HTTP/2.0" | 200 | 3650 | "https://vtheme.us/wp-login.php" | "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; yie9; rv:11.0) like Gecko"198.244.242.239 | - | 06/May/2026:03:51:26 +0000 | "vtheme.us" | "GET /san-pham/woocommerce-search-engine/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"208.68.37.246 | - | 06/May/2026:03:52:25 +0000 | "vtheme.us" | "POST /xmlrpc.php HTTP/2.0" | 200 | 261 | "-" | "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36"54.38.147.225 | - | 06/May/2026:03:52:58 +0000 | "vtheme.us" | "GET /san-pham/guido-directory-listing-wordpress-theme/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"68.183.200.74 | - | 06/May/2026:03:53:26 +0000 | "vtheme.us" | "POST /wp-login.php HTTP/1.1" | 200 | 11462 | "-" | "Mozilla/5.0"198.244.240.145 | - | 06/May/2026:03:54:41 +0000 | "vtheme.us" | "GET /san-pham/content-protector-for-wordpress-prevent-your-content-from-being-copied/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"54.38.147.205 | - | 06/May/2026:03:55:51 +0000 | "vtheme.us" | "GET /san-pham/worksuite-saas-project-management-system/ HTTP/2.0" | 404 | 11926 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"51.195.244.116 | - | 06/May/2026:03:57:02 +0000 | "vtheme.us" | "GET /san-pham/android-whats-web-whatsapp-all-tools-app/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"198.244.226.161 | - | 06/May/2026:03:58:06 +0000 | "vtheme.us" | "GET /san-pham/bookly-staff-cabinet-add-on/feed/ HTTP/2.0" | 304 | 0 | "-" | "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"