Dolibarr is a lightweight open-source ERP and CRM alternative to Odoo and NetSuite, delivering modular invoicing and inventory with low server overhead.
Dolibarr originated in 2002 as a modular business suite written in PHP without framework dependencies. It unifies contacts, invoicing, warehouse inventory, and basic manufacturing, with each module toggled on or off independently. That architecture keeps memory usage under fifty megabytes per worker while delivering quick response times on entry-level virtual servers.
Odoo Enterprise relies on a Python backend, dedicated PostgreSQL tuning, and a client-side JavaScript Single Page Application. Running Odoo smoothly requires operations leads to provision multiple gigabytes of memory, configure WSGI workers, and manage persistent threads for background tasks. Dolibarr takes an opposite technical route: its server-rendered PHP scripts and lean SQL queries execute on standard web servers using PHP-FPM. Pages load rapidly across low-bandwidth connections, allowing an agency or distributor to operate on an inexpensive virtual server without dedicated application daemons.
In exchange for that lean runtime, teams concede Odoo Enterprise’s polished interface and integrated application ecosystem. Odoo provides multi-level bills of materials, automated drop-shipping routes, and an interactive studio for designing custom screens. Dolibarr replaces animated kanban boards and visual workflow builders with utilitarian data tables and manual configuration menus. For operations leads at service agencies and distributors who prioritize predictable resource consumption and zero per-user licensing fees over decorative UI design, Dolibarr eliminates infrastructure headaches and hosting cost spikes.
Is Dolibarr free for commercial use? Yes. Dolibarr is published under the GPL-3.0 license, allowing businesses to self-host and customize the software without paying licensing fees or user seat subscriptions.
Dolibarr vs Odoo Enterprise — which should a small team choose? Choose Dolibarr for a lightweight, cost-effective system handling billing, CRM, and stock management on modest server hardware. Choose Odoo Enterprise if your workflows require advanced manufacturing scheduling, automated marketing suites, or extensive third-party app connectors.
Can Dolibarr run on standard shared web hosting? Yes. Because Dolibarr requires only PHP and MySQL, MariaDB, or PostgreSQL, it runs reliably on conventional shared hosting without root access or container runtimes.
Dolibarr is a practical choice for agencies and small businesses that need billing, customer tracking, and stock management without the operational overhead of a heavy application server. Its GPL-3.0 license guarantees full operational ownership without per-user subscription fees, while ongoing commits throughout 2026 confirm an actively maintained core. For organizations needing advanced discrete manufacturing or intricate corporate financial consolidation, an enterprise-grade ERP remains necessary.
We started this exact setup from scratch in a clean Linux machine on Nov 2, 2026 and checked it through Dolibarr's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p dolibarr && cd dolibarr
curl -fsSL https://open-source.store/tools/dolibarr/compose.yml -o compose.ymlcat > .env <<EOF
DOLI_URL_ROOT=http://localhost:8080
DOLI_ADMIN_LOGIN=admin
DOLI_ADMIN_PASSWORD=$(openssl rand -hex 12)
DOLI_COMPANY_NAME=MyCompany
DOLI_CRON_KEY=$(openssl rand -hex 16)
DOLI_INSTANCE_UNIQUE_ID=$(openssl rand -hex 16)
DOLI_DB_PASSWORD=$(openssl rand -hex 12)
MYSQL_ROOT_PASSWORD=$(openssl rand -hex 12)
EOFDOLI_URL_ROOT — Public URL of the Dolibarr instance; update to your domain (e.g. https://erp.example.com) when behind a reverse proxy.DOLI_ADMIN_LOGIN — Username of the initial administrator account.DOLI_ADMIN_PASSWORD — Password of the initial administrator account. Generated above; keep it secret.DOLI_COMPANY_NAME — Organization or company name configured during initial bootstrap.DOLI_CRON_KEY — Security key protecting automated background cron jobs. Generated above; keep it secret.DOLI_INSTANCE_UNIQUE_ID — Unique instance secret used for database encryption and security hashes. Generated above; keep it secret.DOLI_DB_PASSWORD — Password for the Dolibarr MariaDB database user. Generated above; keep it secret.MYSQL_ROOT_PASSWORD — Root administrative password for the MariaDB database server. Generated above; keep it secret.docker compose up -dservices:
web:
image: dolibarr/dolibarr:24.0.2
restart: always
ports:
- "8080:80"
environment:
DOLI_DB_HOST: mariadb
DOLI_DB_NAME: dolidb
DOLI_DB_USER: dolidb
DOLI_DB_PASSWORD: ${DOLI_DB_PASSWORD}
DOLI_URL_ROOT: ${DOLI_URL_ROOT}
DOLI_ADMIN_LOGIN: ${DOLI_ADMIN_LOGIN}
DOLI_ADMIN_PASSWORD: ${DOLI_ADMIN_PASSWORD}
DOLI_COMPANY_NAME: ${DOLI_COMPANY_NAME}
DOLI_ENABLE_MODULES: "Api,Societe"
DOLI_INSTANCE_UNIQUE_ID: ${DOLI_INSTANCE_UNIQUE_ID}
DOLI_CRON_KEY: ${DOLI_CRON_KEY}
volumes:
- dolibarr-docs:/var/www/documents
- dolibarr-custom:/var/www/html/custom
depends_on:
mariadb:
condition: service_healthy
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:80/index.php || exit 1"]
interval: 10s
timeout: 5s
retries: 25
start_period: 30s
cron:
image: dolibarr/dolibarr:24.0.2
restart: always
environment:
DOLI_DB_HOST: mariadb
DOLI_DB_NAME: dolidb
DOLI_DB_USER: dolidb
DOLI_DB_PASSWORD: ${DOLI_DB_PASSWORD}
DOLI_URL_ROOT: ${DOLI_URL_ROOT}
DOLI_ADMIN_LOGIN: ${DOLI_ADMIN_LOGIN}
DOLI_ADMIN_PASSWORD: ${DOLI_ADMIN_PASSWORD}
DOLI_INSTANCE_UNIQUE_ID: ${DOLI_INSTANCE_UNIQUE_ID}
DOLI_CRON: "1"
DOLI_CRON_KEY: ${DOLI_CRON_KEY}
DOLI_CRON_USER: ${DOLI_ADMIN_LOGIN}
depends_on:
web:
condition: service_healthy
mariadb:
image: mariadb:11.4.13
restart: always
command: >
--character-set-server=utf8mb4
--collation-server=utf8mb4_unicode_ci
--init-connect='SET NAMES utf8mb4'
environment:
MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
MARIADB_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
MYSQL_DATABASE: dolidb
MARIADB_DATABASE: dolidb
MYSQL_USER: dolidb
MARIADB_USER: dolidb
MYSQL_PASSWORD: ${DOLI_DB_PASSWORD}
MARIADB_PASSWORD: ${DOLI_DB_PASSWORD}
volumes:
- mariadb-data:/var/lib/mysql
healthcheck:
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
interval: 5s
timeout: 5s
retries: 20
start_period: 10s
volumes:
dolibarr-docs:
dolibarr-custom:
mariadb-data:
Lint, codegen, breaking-change checks and dependency management in one Git-native CLI. Open source, no registry lock-in.
Show that Dolibarr is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 54 s: dolibarr/dolibarr:24.0.2, dolibarr/dolibarr:24.0.2, mariadb:11.4.13.
Based on the upstream setup. Official compose pinned to Dolibarr 24.0.2 and MariaDB 11.4.13 with database and admin credentials moved to .env, REST API and Third Parties modules enabled, background cron service included for scheduled jobs, and healthchecks added.
web-1 | 2026-11-02T20:38:53.542106014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /sqlite/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Whale/4.32.315.22 Safari/537.36"
web-1 | 2026-11-02T20:38:53.542305139Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config.php.old HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.17"
web-1 | 2026-11-02T20:38:53.542787389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /examples/jsp/num/numguess.jsp?guess=5&hint=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0: Win64: x64: rv:140.0) Gecko/20100101 Firefox/140.0"
web-1 | 2026-11-02T20:38:53.543123222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /examples/jsp/num/numguess.jsp?guess=5&hint=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.3"
web-1 | 2026-11-02T20:38:53.543129681Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /solr/admin/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF"
web-1 | 2026-11-02T20:38:53.543226222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /Account/Register HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18362"
web-1 | 2026-11-02T20:38:53.545493306Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /defaultroot/download_old.jsp?path=..&name=x&FileName=WEB-INF/web.xml HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0"
web-1 | 2026-11-02T20:38:53.545504931Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /webservices/WebUserLogin.asmx/GetUserInfoByUserID?userID=admin HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
web-1 | 2026-11-02T20:38:53.545574556Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /webservices/WebUserLogin.asmx/GetUserInfoByUserID?userID=admin HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0"
web-1 | 2026-11-02T20:38:53.545642472Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /solr/admin/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.16"
web-1 | 2026-11-02T20:38:53.545721639Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /i/?rid HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0"
web-1 | 2026-11-02T20:38:53.545867264Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /i/?rid HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.3"
web-1 | 2026-11-02T20:38:53.547746681Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 591 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8"
web-1 | 2026-11-02T20:38:53.547764056Z [Mon Nov 02 20:38:53.547624 2026] [php:notice] [pid 3652:tid 3652] [client 192.168.65.209:40402] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.547768514Z [Mon Nov 02 20:38:53.547722 2026] [core:error] [pid 3624:tid 3624] [client 192.168.65.209:40326] AH10244: invalid URI path (/../../etc/passwd)
web-1 | 2026-11-02T20:38:53.547849764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /../../etc/passwd HTTP/1.1" 400 432 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
web-1 | 2026-11-02T20:38:53.547918181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.549165097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /../../etc/passwd HTTP/1.1" 400 432 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.549177097Z [Mon Nov 02 20:38:53.549068 2026] [core:error] [pid 3618:tid 3618] [client 192.168.65.209:40290] AH10244: invalid URI path (/../../etc/passwd)
web-1 | 2026-11-02T20:38:53.549299222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.549870764Z [Mon Nov 02 20:38:53.549807 2026] [php:notice] [pid 3590:tid 3590] [client 192.168.65.209:40672] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.549915222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 591 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.550072972Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /sqlitemanager/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.550135347Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config.php.save HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10.15, rv:140.0) Gecko/20100101 Firefox/140.0"
web-1 | 2026-11-02T20:38:53.551724472Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /posts?authorMatch={\"$and\":[{\"$where\":\"this.isAdmin\"}]} HTTP/1.1" 404 381 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.552020847Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eIMConfiguration HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.552063639Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.552149222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/13.0"
web-1 | 2026-11-02T20:38:53.553181889Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /posts?authorMatch={\"$and\":[{\"$where\":\"this.isAdmin\"}]} HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.553286347Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eIMConfiguration HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.554408597Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config.json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.555975722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /guest/users/forgotten?email=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6,2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.555998514Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eid-management HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.57.2 (KHTML, like Gecko) Version/5.1.7 Safari/534.57.2"
web-1 | 2026-11-02T20:38:53.557165306Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0"
web-1 | 2026-11-02T20:38:53.557217472Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config.json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.3 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.557305014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36"
web-1 | 2026-11-02T20:38:53.557408597Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /guest/users/forgotten?email=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.557453556Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /.config.php.swp HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.2; rv:128.12) Gecko/20100101 Firefox/128.12"
web-1 | 2026-11-02T20:38:53.563319389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET / HTTP/1.1" 200 3095 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0"
web-1 | 2026-11-02T20:38:53.563969681Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eid-management-new HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
web-1 | 2026-11-02T20:38:53.563997472Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eid-management HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.2; rv:31.0) Gecko/20100101 Firefox/31.0"
web-1 | 2026-11-02T20:38:53.565046639Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /?static=1&order=asc HTTP/1.1" 200 3107 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.565442764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config.php.txt HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36"
web-1 | 2026-11-02T20:38:53.566549681Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /config/settings.old.php HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; it-it) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27"
web-1 | 2026-11-02T20:38:53.566576597Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /bulk-profile-operation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.566969556Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /Login?!'><sVg/OnLoAD=alert`1337`// HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.567343431Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /Login?!'><sVg/OnLoAD=alert`1337`// HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.567385139Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET //content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.567506097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0"
web-1 | 2026-11-02T20:38:53.567546306Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET //content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.567601222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ghost/preview HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.567660639Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /k8s/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.567822722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0"
web-1 | 2026-11-02T20:38:53.567825764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9"
web-1 | 2026-11-02T20:38:53.568098806Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /openam/ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.569585764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /openam/ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.569612722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /sqlite/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.569675847Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0"
web-1 | 2026-11-02T20:38:53.570794181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ghost/preview HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.570807014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36"
web-1 | 2026-11-02T20:38:53.570832847Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /eid-management-new HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.573541097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /admin/index.php?module=file_editor&file=/../../../../../../../../../../../etc/passwd HTTP/1.1" 200 3131 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586"
web-1 | 2026-11-02T20:38:53.573563222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /?wptouch_switch=desktop&redirect=https://interact.sh/ HTTP/1.1" 200 3125 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.573815014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /admin/ HTTP/1.1" 200 2969 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.573949097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.576391597Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET / HTTP/1.1" 200 3092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36"
web-1 | 2026-11-02T20:38:53.576808264Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /login?next=http://interact.sh/?app.scan/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.576831514Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET / HTTP/1.1" 200 3092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0.1 Safari/604.3.5"
web-1 | 2026-11-02T20:38:53.576963472Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /admin/index.php?module=file_editor&file=/../../../../../../../../../../../etc/passwd HTTP/1.1" 200 3129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 Thunderbird/140.0"
web-1 | 2026-11-02T20:38:53.576984889Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /login?next=http://interact.sh/?app.scan/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.577593097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /symfony/_profiler/empty/search/results?limit=10 HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.4 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.577710681Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /?wptouch_switch=desktop&redirect=https://interact.sh/ HTTP/1.1" 200 3124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.578216389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /?static=1&order=asc HTTP/1.1" 200 3108 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.580693014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET / HTTP/1.1" 200 3093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
web-1 | 2026-11-02T20:38:53.580755056Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";><script>alert(document.domain)</script> HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/125.5.6 (KHTML, like Gecko) Safari/125.12"
web-1 | 2026-11-02T20:38:53.580785764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";><script>alert(document.domain)</script> HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
web-1 | 2026-11-02T20:38:53.580928514Z [Mon Nov 02 20:38:53.580913 2026] [php:notice] [pid 3580:tid 3580] [client 192.168.65.209:40442] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.580962181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_dioneformwizard&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 621 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.581040514Z [Mon Nov 02 20:38:53.581031 2026] [php:notice] [pid 3557:tid 3557] [client 192.168.65.209:40452] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.581076014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_dioneformwizard&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 621 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.581235056Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /cgi-bin/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.581258764Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /cgi-sys/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.3 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.581358722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /admin/ HTTP/1.1" 200 2968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.581842722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /signup?next=http://interact.sh/?app.scan/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.581853389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /bulk-profile-operation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8.1 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.581872097Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0"
web-1 | 2026-11-02T20:38:53.581892764Z [Mon Nov 02 20:38:53.581880 2026] [php:notice] [pid 3634:tid 3634] [client 192.168.65.209:40416] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.581918722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Mobile/15E148 Safari/604.1"
web-1 | 2026-11-02T20:38:53.581939139Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4"
web-1 | 2026-11-02T20:38:53.581993847Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /sqlitemanager/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/115.0"
web-1 | 2026-11-02T20:38:53.582070181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /OpenAM-11.0.0/ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.582521222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /..;//content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; ja-jp) AppleWebKit/523.12.2 (KHTML, like Gecko) Version/3.0.4 Safari/523.12.2"
web-1 | 2026-11-02T20:38:53.582522847Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /scripts/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.582527056Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /..;//content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.582533222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ioncube/loader-wizard.php HTTP/1.1" 404 381 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.8"
web-1 | 2026-11-02T20:38:53.582583639Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /debug/vars HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0"
web-1 | 2026-11-02T20:38:53.582624556Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /v1/folder?path=%2F HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0"
web-1 | 2026-11-02T20:38:53.582659139Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /OpenAM-11.0.0/ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.582672347Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /cgi-sys/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36"
web-1 | 2026-11-02T20:38:53.582739889Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /v1/folder?path=%2F HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.582780139Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /debug/_profiler/empty/search/results?limit=10 HTTP/1.1" 404 381 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.582800847Z [Mon Nov 02 20:38:53.582789 2026] [php:notice] [pid 3606:tid 3606] [client 192.168.65.209:40482] Access refused to 192.168.65.209 by SQL or Script injection protection in main.inc.php:analyseVarsForSqlAndScriptsInjection type=1
web-1 | 2026-11-02T20:38:53.582824722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected])"
web-1 | 2026-11-02T20:38:53.582830514Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /debug/vars HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:30.0) Gecko/20100101 Firefox/30.0"
web-1 | 2026-11-02T20:38:53.582867431Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /signup?next=http://interact.sh/?app.scan/ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
web-1 | 2026-11-02T20:38:53.583078056Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
web-1 | 2026-11-02T20:38:53.583103306Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ioncube/loader-wizard.php HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0"
web-1 | 2026-11-02T20:38:53.583489014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /scripts/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5"
web-1 | 2026-11-02T20:38:53.583536597Z [Mon Nov 02 20:38:53.583527 2026] [php:error] [pid 3613:tid 3613] [client 192.168.65.209:40868] script '/var/www/html/loader-wizard.php' not found or unable to stat
web-1 | 2026-11-02T20:38:53.583573181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /lite-scripts/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0"
web-1 | 2026-11-02T20:38:53.583585222Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /loader-wizard.php HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 6.2; rv:139.0) Gecko/20100101 Firefox/139.0"
web-1 | 2026-11-02T20:38:53.583589389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /lite-scripts/info.cgi HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"
web-1 | 2026-11-02T20:38:53.583670181Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /dev/_profiler/empty/search/results?limit=10 HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25"
web-1 | 2026-11-02T20:38:53.583691722Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /ui/PWResetUserValidation HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)"
web-1 | 2026-11-02T20:38:53.583739681Z [Mon Nov 02 20:38:53.583731 2026] [php:error] [pid 3625:tid 3625] [client 192.168.65.209:40604] script '/var/www/html/loader-wizard.php' not found or unable to stat
web-1 | 2026-11-02T20:38:53.583753389Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /loader-wizard.php HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6,2 Safari/605.1.15"
web-1 | 2026-11-02T20:38:53.583848014Z 192.168.65.209 - - [02/Nov/2026:20:38:53 +0000] "GET /profiler/empty/search/results?limit=10 HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36"
web-1 | 2026-11-02T20:38:53.589391931Z 127.0.0.1 - - [02/Nov/2026:20:38:53 +0000] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Debian) (internal dummy connection)"
web-1 | 2026-11-02T20:38:54.592163958Z 127.0.0.1 - - [02/Nov/2026:20:38:54 +0000] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Debian) (internal dummy connection)"
web-1 | 2026-11-02T20:38:55.599058875Z 127.0.0.1 - - [02/Nov/2026:20:38:55 +0000] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.68 (Debian) (internal dummy connection)"