Self-hosted CRM alternative to HubSpot. EspoCRM provides custom sales pipelines, contact tracking, and client portals with complete data ownership.
HubSpot stores customer records in a multi-tenant cloud and charges escalating per-seat fees as contacts accumulate. EspoCRM runs on your infrastructure, removing user seat taxes and granting direct database access. Organizations maintain complete custody of their client histories while running customizable sales pipelines and service cases.
EspoCRM covers the core customer management workflows teams rely on in HubSpot: lead intake, visual deal pipelines, email tracking over IMAP, and support ticketing. The distinction centers on data sovereignty. In HubSpot, communication logs, customer records, and deal values live on proprietary servers under vendor terms. EspoCRM deploys to private hardware with a MySQL, MariaDB, or PostgreSQL backend. That physical isolation ensures customer data never leaves internal systems, satisfying strict non-disclosure terms and privacy regulations without enterprise contracts.
The trade-off involves operational duties and feature scope. HubSpot provides a managed environment with inbound marketing tools, email sequences, and zero server maintenance. EspoCRM requires system administration: ops leads must manage backups, web servers, and cron jobs. While EspoCRM includes a visual Entity Manager to customize records and relationships, advanced flowchart automations and quoting tools require purchasing vendor extensions or building custom API integrations. For teams prioritizing data custody over cloud convenience, self-hosting provides sustainable autonomy.
Is EspoCRM free for commercial use? Yes. The core software carries an AGPL-3.0 grant and permits unrestricted commercial self-hosting without user fees. Optional add-ons like the Sales Pack require separate commercial terms.
EspoCRM vs HubSpot — which should you choose? Choose HubSpot if you want a fully managed cloud service with bundled marketing sequences and zero server administration. Choose EspoCRM if you need total data sovereignty, custom database schemas, and unmetered seat scaling on private hardware.
Can I self-host EspoCRM using Docker? Yes. The maintainers provide official Docker images and Compose templates that pair the application with MySQL, MariaDB, or PostgreSQL databases.
EspoCRM suits small teams and operations leads who demand full custody of customer data and can maintain a PHP stack, though teams seeking turnkey marketing sequences should look elsewhere. Active development with commits recorded in September 2026 confirms an attentive maintenance cycle, while its AGPL-3.0 license protects your right to inspect, customize, and run the platform without per-seat licensing penalties.
We started this exact setup from scratch in a clean Linux machine on Nov 3, 2026 and checked it through EspoCRM's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p espocrm && cd espocrm
curl -fsSL https://open-source.store/tools/espocrm/compose.yml -o compose.ymlcat > .env <<EOF
MARIADB_ROOT_PASSWORD=$(openssl rand -hex 12)
MARIADB_PASSWORD=$(openssl rand -hex 12)
ESPOCRM_ADMIN_USERNAME=admin
ESPOCRM_ADMIN_PASSWORD=$(openssl rand -hex 12)
ESPOCRM_SITE_URL=http://localhost:8080
EOFMARIADB_ROOT_PASSWORD — Root password for the bundled MariaDB database. Generated above; keep it secret.MARIADB_PASSWORD — Database user password for the espocrm user. Generated above; keep it secret.ESPOCRM_ADMIN_USERNAME — Username for the initial administrator account.ESPOCRM_ADMIN_PASSWORD — Password for the initial administrator account. Generated above; keep it secret.ESPOCRM_SITE_URL — Public URL of the EspoCRM instance; change to your domain in production.docker compose up -dservices:
espocrm-db:
image: mariadb:11.4.13
restart: always
environment:
MARIADB_ROOT_PASSWORD: ${MARIADB_ROOT_PASSWORD}
MARIADB_DATABASE: espocrm
MARIADB_USER: espocrm
MARIADB_PASSWORD: ${MARIADB_PASSWORD}
volumes:
- espocrm-db:/var/lib/mysql
healthcheck:
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
interval: 10s
timeout: 5s
retries: 5
start_period: 10s
espocrm:
image: espocrm/espocrm:10.0.11
restart: always
environment:
ESPOCRM_DATABASE_HOST: espocrm-db
ESPOCRM_DATABASE_USER: espocrm
ESPOCRM_DATABASE_PASSWORD: ${MARIADB_PASSWORD}
ESPOCRM_ADMIN_USERNAME: ${ESPOCRM_ADMIN_USERNAME}
ESPOCRM_ADMIN_PASSWORD: ${ESPOCRM_ADMIN_PASSWORD}
ESPOCRM_SITE_URL: ${ESPOCRM_SITE_URL}
volumes:
- espocrm-data:/var/www/html/data
- espocrm-custom:/var/www/html/custom
- espocrm-custom-client:/var/www/html/client/custom
depends_on:
espocrm-db:
condition: service_healthy
ports:
- "8080:80"
healthcheck:
test: ["CMD", "bin/command", "app-check"]
start_period: 30s
interval: 10s
timeout: 10s
retries: 10
espocrm-daemon:
image: espocrm/espocrm:10.0.11
restart: always
entrypoint: docker-daemon.sh
volumes:
- espocrm-data:/var/www/html/data
- espocrm-custom:/var/www/html/custom
- espocrm-custom-client:/var/www/html/client/custom
depends_on:
espocrm:
condition: service_healthy
healthcheck:
test: ["CMD", "bin/command", "app-check"]
start_period: 20s
interval: 30s
timeout: 10s
retries: 5
volumes:
espocrm-db:
espocrm-data:
espocrm-custom:
espocrm-custom-client:
Lint, codegen, breaking-change checks and dependency management in one Git-native CLI. Open source, no registry lock-in.
Show that EspoCRM is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 236 s: espocrm/espocrm:10.0.11, mariadb:11.4.13, espocrm/espocrm:10.0.11.
Based on the upstream setup. Official compose using MariaDB and background daemon; optional websocket omitted.
espocrm-1 | 2026-11-03T07:18:48.803953171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" espocrm-1 | 2026-11-03T07:18:48.803953879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.3 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.803954629Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sphinx/sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.803955296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /bin/view/Main/?rev=xar%3Aorg.xwiki.platform%3Axwiki-platform-distribution-flavor-common%2F15.5%25%25%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0" espocrm-1 | 2026-11-03T07:18:48.803956088Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sphinxsearch/sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0" espocrm-1 | 2026-11-03T07:18:48.803956879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.803957588Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /lab.html?vpath=//interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0" espocrm-1 | 2026-11-03T07:18:48.803964171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /xwiki/bin/view/Main/?rev=xar%3Aorg.xwiki.platform%3Axwiki-platform-distribution-flavor-common%2F15.5%25%25%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" espocrm-1 | 2026-11-03T07:18:48.804048046Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/db_eventlog_w.cgi?date_start=0&date_end=1715630160&gravity=%25&type=%25%27and/**/%271%27=%271 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.804109713Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /agc/vicidial_mysqli_errors.txt HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.804181879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /darkstat/ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.99 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.805083504Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /host.json HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" espocrm-1 | 2026-11-03T07:18:48.805085379Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /host.json HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.806133671Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?option=com_jvouchers&controller=catalog-results&task=query&wajx=1&wmjx=1&tmpl=component&type=raw&crtyid=12&trucs[x][search]=gx3vt%20onfocus=alert(document.domain)%20autofocus=%20itkrzsug7w5 HTTP/1.1" 200 2724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" espocrm-1 | 2026-11-03T07:18:48.806150296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /lab.html?vpath=//interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; nl-nl) AppleWebKit/527+ (KHTML, like Gecko) Version/3.1.1 Safari/525.20" espocrm-1 | 2026-11-03T07:18:48.806435629Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.806921713Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/raster/search/?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:124.0) Gecko/20100101 Firefox/129.0" espocrm-1 | 2026-11-03T07:18:48.806948004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /agc/vicidial_mysqli_errors.txt HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" espocrm-1 | 2026-11-03T07:18:48.807108796Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats/awstats.pl?config=3LaRSKOxW0EahStHJ0o6PUH37T6 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.13" espocrm-1 | 2026-11-03T07:18:48.807214546Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats.pl?config=3LaRSKOxW0EahStHJ0o6PUH37T6 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0" espocrm-1 | 2026-11-03T07:18:48.807391296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats/awstats.pl?config=3LaRSKOxW0EahStHJ0o6PUH37T6 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.807435754Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats.pl?config=3LaRSKOxW0EahStHJ0o6PUH37T6 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.807589171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.807604671Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET / HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.807781088Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET / HTTP/1.1" 200 2722 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.808626963Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?option=com_jvouchers&controller=catalog-results&task=query&wajx=1&wmjx=1&tmpl=component&type=raw&crtyid=12&trucs[x][search]=gx3vt%20onfocus=alert(document.domain)%20autofocus=%20itkrzsug7w5 HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.808786838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /filezilla.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.809815046Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET / HTTP/1.1" 200 2725 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2" espocrm-1 | 2026-11-03T07:18:48.809923713Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /search/configs/sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.810000879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/v1/tenants/current HTTP/1.1" 401 191 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.810932879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0" espocrm-1 | 2026-11-03T07:18:48.811024004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /perpustakaan/slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0" espocrm-1 | 2026-11-03T07:18:48.811115963Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /darkstat/ HTTP/1.1" 404 481 "-" "WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.811205296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /.gitlab-ci/variables.yml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:104.0) Gecko/20100101 Firefox/104.0" espocrm-1 | 2026-11-03T07:18:48.811425629Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET / HTTP/1.1" 200 2723 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.811476213Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /environment/ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.812426338Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.812543754Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0" espocrm-1 | 2026-11-03T07:18:48.813473171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 2725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" espocrm-1 | 2026-11-03T07:18:48.814310004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /src/login.php?referer=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.814395921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /requestlogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0" espocrm-1 | 2026-11-03T07:18:48.814476463Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/db_eventlog_w.cgi?date_start=0&date_end=1715630160&gravity=%25&type=%25%27and/**/%271%27=%271 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.814547171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /awstats/awredir.pl?url=interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.814716796Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /requestlogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" espocrm-1 | 2026-11-03T07:18:48.815400796Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/v1/tenants/current HTTP/1.1" 401 191 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" espocrm-1 | 2026-11-03T07:18:48.816198254Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /assets/login?a=https://interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" espocrm-1 | 2026-11-03T07:18:48.816802254Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/se-html5-album-audio-player/download_audio.php?file=/wp-content/uploads/../../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" espocrm-1 | 2026-11-03T07:18:48.819121171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.819130879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/se-html5-album-audio-player/download_audio.php?file=/wp-content/uploads/../../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.4" espocrm-1 | 2026-11-03T07:18:48.819132004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:58.0) Gecko/20100101 Firefox/59.0" espocrm-1 | 2026-11-03T07:18:48.819732838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /assets/login?a=https://interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/5.0" espocrm-1 | 2026-11-03T07:18:48.819743004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /topic/e'%22%3E%3Cimg%20src=x%20onerror=alert(2)%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.2" espocrm-1 | 2026-11-03T07:18:48.819855046Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /topic/e'%22%3E%3Cimg%20src=x%20onerror=alert(2)%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0" espocrm-1 | 2026-11-03T07:18:48.819981796Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0" espocrm-1 | 2026-11-03T07:18:48.820062463Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/requestlogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" espocrm-1 | 2026-11-03T07:18:48.821256213Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /streams/v1/polyaxon/default/s/runs/%2e%2e/artifact?stream=true&path=../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.10" espocrm-1 | 2026-11-03T07:18:48.821398921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /json/reply/RequestLogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.821579004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (X11; Linux i686; en-US) Gecko/20010604 Firefox/109.0" espocrm-1 | 2026-11-03T07:18:48.821714588Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/raster/search/?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.821782254Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.822066838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /e-library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.7" espocrm-1 | 2026-11-03T07:18:48.822451171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.822578421Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /perpus/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" espocrm-1 | 2026-11-03T07:18:48.822750088Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /digilib/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.822999838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sitemanager.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0" espocrm-1 | 2026-11-03T07:18:48.823004213Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /bin/view/Main/?rev=xar%3Aorg.xwiki.platform%3Axwiki-platform-distribution-flavor-common%2F15.5%25%25%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.823027588Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sphinx/sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.823092879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /xwiki/bin/view/Main/?rev=xar%3Aorg.xwiki.platform%3Axwiki-platform-distribution-flavor-common%2F15.5%25%25%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" espocrm-1 | 2026-11-03T07:18:48.823221171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /FileZilla.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.823451838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sphinxsearch/sphinx.conf HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" espocrm-1 | 2026-11-03T07:18:48.823478754Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET ///////this-should-not-exist,.%3C%3E%21@ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" espocrm-1 | 2026-11-03T07:18:48.823848421Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /bulian/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.823874379Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /mem_tracker HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0" espocrm-1 | 2026-11-03T07:18:48.824101129Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /%00 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.824126588Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.824266671Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/security/ticket HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 6.1; rv:33.0) Gecko/20100101 Firefox/33.0" espocrm-1 | 2026-11-03T07:18:48.825117129Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/cache/log/000000/minify.log HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5" espocrm-1 | 2026-11-03T07:18:48.825142504Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?redirect=/\\/interact.sh/ HTTP/1.1" 200 2724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.825291963Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/awstats/awredir.pl?url=interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.826402004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/security/ticket HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.826591171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sites/default/settings.php.swp HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.826615129Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0" espocrm-1 | 2026-11-03T07:18:48.826635463Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sites/default/settings.php.save HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" espocrm-1 | 2026-11-03T07:18:48.826776754Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sites/default/settings.local.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.8" espocrm-1 | 2026-11-03T07:18:48.827073504Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /e-library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.9" espocrm-1 | 2026-11-03T07:18:48.827212338Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /perpus/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0" espocrm-1 | 2026-11-03T07:18:48.827338754Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /digilib/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1" espocrm-1 | 2026-11-03T07:18:48.827457963Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /bulian/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.827700921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.827702588Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /perpustakaan/slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.827838296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sitemanager.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.827924421Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /FileZilla.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.827925713Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /filezilla.xml HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.828372629Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/v1/clusters/kubeconfig/k8s HTTP/1.1" 401 191 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" espocrm-1 | 2026-11-03T07:18:48.829361921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET ///////this-should-not-exist,.%3C%3E%21@ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.829393546Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8" espocrm-1 | 2026-11-03T07:18:48.829477921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /%00 HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.829479254Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /streams/v1/polyaxon/default/s/runs/%2e%2e/artifact?stream=true&path=../../../../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.829529504Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?redirect=//interact.sh HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0" espocrm-1 | 2026-11-03T07:18:48.829645879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /mem_tracker HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.829676213Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /sites/default/settings.local.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.829823338Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" espocrm-1 | 2026-11-03T07:18:48.829923129Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /%5coast.pro/%2f%2e%2e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.830163171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /debug/ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.830185713Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /debug/ HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.830281296Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /%5coast.pro/%2f%2e%2e HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3" espocrm-1 | 2026-11-03T07:18:48.830369963Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /download/C%3a%2fwindows%2fsystem.ini HTTP/1.1" 404 481 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.830495838Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /download/C%3a%2fwindows%2fsystem.ini HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.830672004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d HTTP/1.1" 200 2727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" espocrm-1 | 2026-11-03T07:18:48.830836879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/requestlogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0" espocrm-1 | 2026-11-03T07:18:48.831206921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /login?next=\\\\\\interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:140.0) Gecko/20100101 Firefox/140.0" espocrm-1 | 2026-11-03T07:18:48.831209129Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /login?next=\\\\\\interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.831233879Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /json/reply/RequestLogs HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.831469629Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /cgi-bin/awstats/awredir.pl?url=interact.sh HTTP/1.1" 404 481 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.832025171Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /api/v1/clusters/kubeconfig/k8s HTTP/1.1" 401 191 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" espocrm-1 | 2026-11-03T07:18:48.836463921Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?redirect=/\\/interact.sh/ HTTP/1.1" 200 2726 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.838419004Z 192.168.65.219 - - [03/Nov/2026:07:18:48 +0000] "GET /index.php?redirect=//interact.sh HTTP/1.1" 200 2727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15" espocrm-1 | 2026-11-03T07:18:48.979032046Z 127.0.0.1 - - [03/Nov/2026:07:18:48 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) OpenSSL/3.5.7 (internal dummy connection)" espocrm-1 | 2026-11-03T07:18:49.983360213Z 127.0.0.1 - - [03/Nov/2026:07:18:49 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) OpenSSL/3.5.7 (internal dummy connection)" espocrm-1 | 2026-11-03T07:18:50.987687922Z 127.0.0.1 - - [03/Nov/2026:07:18:50 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) OpenSSL/3.5.7 (internal dummy connection)"