Finally I found out where it came from... I have a Mail Software running in a Docker container. This container also is running NGINX.