The App Store for open-source. Curated alternatives to proprietary software — self-hosted and desktop.
Koel — open-source Spotify alternative | open-source.store
Koel MIT Koel is an open-source, self-hosted music server that streams personal audio libraries through a modern web UI and Subsonic-compatible mobile apps.
Open-source alternative to — compare it against: Koel pairs a Laravel backend with a Vue.js single-page application to stream personal audio collections from local or object storage. First released in 2015 by Phan An, the server offloads audio delivery to Nginx or Apache while rendering a responsive browser interface. It provides lossless streaming, on-the-fly transcoding, and Subsonic API integration without external telemetry.
Why Koel instead of Spotify
Spotify serves audio over wide-area CDNs with lossy compression and digital rights checks that add playback latency. Koel streams directly across a local network or VPN from private storage with minimal delay. Supporting acceleration headers like X-Accel-Redirect in Nginx and X-Sendfile in Apache, the PHP backend handles authentication and hands socket delivery directly to the web server kernel. This bypasses PHP memory limits and maintains steady throughput when streaming full-fidelity FLAC audio across household devices.
The main contrast involves music availability and infrastructure ownership. Spotify bundles algorithmic recommendation feeds and commercial licensing for tens of millions of songs into an ongoing subscription fee. Koel supplies no tracks of its own; it streams files hosted on local disks or S3 buckets, leaving library organization, tag curation, and storage backups to the host admin. That trade-off eliminates licensing revocations and external data tracking, but requires hands-on media maintenance.
What it does well
Web server acceleration via X-Accel-Redirect and X-Sendfile headers, letting low-power servers deliver high-bitrate audio without exhausting PHP worker pools.
Native Subsonic API compatibility, allowing connections from established mobile clients like Symfonium, DSub, and Tempo.
On-the-fly transcoding via FFmpeg, converting uncompressed formats to lower bitrates for streaming over metered mobile links.
Non-blocking library scanning with Laravel queues, indexing ID3 tags and embedded artwork into MariaDB, PostgreSQL, or SQLite.
Dynamic smart playlists configured through rule-based filters like play count, genre, and release year, evaluated in SQL.
Optional metadata enrichment via Last.fm, MusicBrainz, and the Spotify Web API for album art and artist biographies.
Limitations
Library scans encountering an unmounted share treat the empty folder as deleted media, clearing track records and playlists until rescanned.
Web playback in iOS Safari requires requesting the desktop site to prevent mobile audio pauses when not using a Subsonic client.
Database query overhead increases during directory scans on libraries over 50,000 tracks, requiring Redis queue workers and database tuning.
Multi-tenant user isolation, single sign-on, and S3 storage drivers require the commercial Koel Plus edition rather than the base project.
Who should use it
Homelab administrators with private FLAC or MP3 collections: Koel runs as a lightweight container, delivering a clean browser player without the memory footprint of heavy media servers.
Self-hosters using the Subsonic ecosystem: Koel serves as a home web player while providing endpoints for mobile apps on iOS and Android.
Home server operators on limited upload connections: Koel leverages local FFmpeg binaries to transcode high-resolution tracks before sending them over the internet.
FAQ Can Koel replace Spotify for daily listening?
Koel replaces playback and playlist management for tracks on your private server, but provides no music licensing or discovery algorithms. You must supply your own audio files.
Does Koel support mobile apps on Android and iOS?
Yes. Alongside the community Koel Player app, Koel exposes Subsonic API endpoints that connect directly to clients like Symfonium, DSub, and Amperfy.
What resources are required to run Koel?
A basic setup runs on a single CPU core and 1 GB of RAM with SQLite or MariaDB. Transcoding lossless files via FFmpeg increases CPU usage based on active streams.
Verdict Koel fits homelab administrators who own their music library and want a responsive web player alongside Subsonic mobile streaming. It does not suit listeners who want an all-inclusive commercial catalog or algorithmic recommendations. Active maintenance through August 2026 and an MIT license that permits private code modification make it a reliable centerpiece for self-hosted audio streaming.
— anonymous GET /api/playlists → 401
security: create playlist requires auth — anonymous POST /api/playlists → 401 security: users list requires auth — anonymous GET /api/users → 401 security: initial data requires auth — anonymous GET /api/data → 401 security: open protocols — no unauthenticated Redis protocol on public ports security: nuclei scan — no findings Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 51 s: mariadb:10.11, phanan/koel:9.15.0.
Based on the upstream setup . Official MariaDB compose; image pinned to 9.15.0, app key, public URL, and database passwords moved to .env, container healthchecks added.
koel-1 | 2026-11-01T02:28:20.095441970Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.099565762Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /openam/oauth2/..;/ccversion/Version HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.110740845Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-json/wooconvo/v1/download-file?order_id=1&filename=../../../../wp-config.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.118285720Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /..%3B/monitoring HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.118559470Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script> HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0"
koel-1 | 2026-11-01T02:28:20.120065429Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.120135012Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0"
koel-1 | 2026-11-01T02:28:20.122415304Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /app/collibra.properties HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.125720512Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /webservices/WebUserLogin.asmx/GetUserInfoByUserID?userID=admin HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.127567679Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /prisma/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0"
koel-1 | 2026-11-01T02:28:20.128497095Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /SMS_DP_SMSPKG$/Datalib HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.129786179Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /api/v1/cluster/summary HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.130238720Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /preview.php?controller=Load&action=index&catid=moztj%22%3E%3Cscript%3Ealert(document.domain)%3C%2fscript%3Ems3ea&down_up=a HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.130438762Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /rest/GetAutologin HTTP/1.1" 200 1376 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.9"
koel-1 | 2026-11-01T02:28:20.131237637Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /preview.php?controller=Load&action=index&catid=moztj%22%3E%3Cscript%3Ealert(document.domain)%3C%2fscript%3Ems3ea&down_up=a HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.131992554Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-content/plugins/user-meta/views/debug.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.133103970Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /CDGServer3/SQL/MYSQL/create_SmartSec_mysql.sql HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.133216679Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /CDGServer3/SQL/MYSQL/create_SmartSec_mysql.sql HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0"
koel-1 | 2026-11-01T02:28:20.133295345Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-json/wooconvo/v1/download-file?order_id=1&filename=../../../../wp-config.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
koel-1 | 2026-11-01T02:28:20.133580762Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-content/plugins/user-meta/views/debug.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.133785970Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /rest/GetAutologin HTTP/1.1" 200 1376 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16"
koel-1 | 2026-11-01T02:28:20.137282679Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /SMS_DP_SMSPKG$/Datalib HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.16 (KHTML, like Gecko) Version/8.0 Safari/537.16"
koel-1 | 2026-11-01T02:28:20.137896804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"
koel-1 | 2026-11-01T02:28:20.137941345Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.143727429Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.144524054Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.144847387Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /html/repository HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.146029220Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?option=com_agora&task=profile&page=avatars&action=../../../../../../../../etc/passwd HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.146042345Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /index.php?option=com_agora&task=profile&page=avatars&action=../../../../../../../../etc/passwd HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.147750470Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?search=1af%22+onclick%3D'alert(document.domain)' HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.148174137Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.151802429Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /html/repository HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.8"
koel-1 | 2026-11-01T02:28:20.155595720Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET / HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.99 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.156242595Z 192.168.64.161 - - [01/Nov/2026:02:28:19 +0000] "GET /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.156246304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /user/scripts/login_par.js HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 6.2; rv:139.0) Gecko/20100101 Firefox/139.0"
koel-1 | 2026-11-01T02:28:20.156339095Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?search=1af%22+onclick%3D'alert(document.domain)' HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.158171804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /AvalancheWeb/image?imageFilePath=C:/windows/win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.158437179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /src/prisma/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.159737512Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /user/scripts/login_par.js HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.160185970Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /src/collibra.properties HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
koel-1 | 2026-11-01T02:28:20.160513220Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /manifest.json HTTP/1.1" 200 1433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.161244304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script> HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0"
koel-1 | 2026-11-01T02:28:20.161676804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /AvalancheWeb/image?imageFilePath=C:/windows/win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:104.0) Gecko/20100101 Firefox/104.0"
koel-1 | 2026-11-01T02:28:20.161712012Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.162013845Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET / HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"
koel-1 | 2026-11-01T02:28:20.163614554Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /manifest.json HTTP/1.1" 200 1433 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.164613179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /?aiowpsec_do_log_out=1&al_additional_data=1 HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.165444470Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /?aiowpsec_do_log_out=1&al_additional_data=1 HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.755401346Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.761905471Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0"
koel-1 | 2026-11-01T02:28:20.784512554Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /prweb/PRAuth/app/default/ HTTP/1.1" 301 613 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.11"
koel-1 | 2026-11-01T02:28:20.784536596Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /prweb/PRAuth/app/default/ HTTP/1.1" 301 613 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/9.0"
koel-1 | 2026-11-01T02:28:20.787596929Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /signEzUI/playlist/edit/upload/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.787635012Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /signEzUI/playlist/edit/upload/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.20"
koel-1 | 2026-11-01T02:28:20.811139262Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /src/prisma/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.812591804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.4 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.816226554Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /cms/info.php?mod=list%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.820418304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /db/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0"
koel-1 | 2026-11-01T02:28:20.820601387Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /cms/info.php?mod=list%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.822935012Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /.prisma/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.830448429Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /SMS_DP_SMSPKG$/Datalib HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.830714346Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /service/rest/v1/repositories HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.17"
koel-1 | 2026-11-01T02:28:20.839620137Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /allversions HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/125.5.6 (KHTML, like Gecko) Safari/125.12"
koel-1 | 2026-11-01T02:28:20.840831346Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.841553096Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /service/rest/v1/repositories HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0"
koel-1 | 2026-11-01T02:28:20.844648387Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /src/collibra.properties HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.845627096Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.846005304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0"
koel-1 | 2026-11-01T02:28:20.849564304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.849875512Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-admin/admin-ajax.php?action=fb3d_send_posts HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123"
koel-1 | 2026-11-01T02:28:20.850041679Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /messages HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.850144054Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /calendar/calendar_form.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.851415054Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-admin/admin-ajax.php?action=fb3d_send_posts HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.854105804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.858510929Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /allversions HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.872925512Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.874908387Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0"
koel-1 | 2026-11-01T02:28:20.876843012Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/index HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.878381471Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /fosagent/repl/download-file?basedir=4&filepath=..\\..\\Windows\\win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.879441179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.879510012Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\" HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.882690096Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /messages HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.885638471Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php/interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.887429846Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.891370179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/toolbar HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.891858471Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /fosagent/repl/download-snapshot?name=..\\..\\..\\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.894173221Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.897545221Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /sendgrid.env HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 6.2; rv:140.) Gecko/20100101 Firefox/140."
koel-1 | 2026-11-01T02:28:20.898982721Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.899585929Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/view HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1"
koel-1 | 2026-11-01T02:28:20.902464679Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\" HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.9"
koel-1 | 2026-11-01T02:28:20.912373887Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.912856179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.913490637Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /calendar/calendar_form.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.913610679Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4 HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.915398804Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7"
koel-1 | 2026-11-01T02:28:20.917489846Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /fosagent/repl/download-file?basedir=4&filepath=..\\..\\Windows\\win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.917849929Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php/interact.sh HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0"
koel-1 | 2026-11-01T02:28:20.918207179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/index HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.921162512Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.925819846Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?m=search&c=index&a=initxqb4n<img%20src%3da%20onerror%3dalert(document.domain)>cu9rs&modelid=1&q=tes HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.929899221Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini HTTP/1.1" 404 2139 "-" "WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.930206721Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /fosagent/repl/download-snapshot?name=..\\..\\..\\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
koel-1 | 2026-11-01T02:28:20.930298221Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /MicroStrategy/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0"
koel-1 | 2026-11-01T02:28:20.931405721Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.931843971Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /SMS_DP_SMSPKG$/Datalib HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.16"
koel-1 | 2026-11-01T02:28:20.934079262Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /sendgrid.env HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
koel-1 | 2026-11-01T02:28:20.934632429Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /MicroStrategy/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0"
koel-1 | 2026-11-01T02:28:20.936194637Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /db/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0"
koel-1 | 2026-11-01T02:28:20.940106179Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/toolbar HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
koel-1 | 2026-11-01T02:28:20.943608304Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /index.php?m=search&c=index&a=initxqb4n<img%20src%3da%20onerror%3dalert(document.domain)>cu9rs&modelid=1&q=tes HTTP/1.1" 200 2525 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0"
koel-1 | 2026-11-01T02:28:20.945259096Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /actions/debug/default/view HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0"
koel-1 | 2026-11-01T02:28:20.945981887Z 192.168.64.161 - - [01/Nov/2026:02:28:20 +0000] "GET /.prisma/schema.prisma HTTP/1.1" 404 2139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15"
koel-1 | 2026-11-01T02:28:20.962471637Z 192.168.64.161 - - [01/Nov/2026:02:28:02 +0000] "GET /login HTTP/1.1" 400 524 "-" "-"
koel-1 | 2026-11-01T02:28:20.962478221Z 192.168.64.161 - - [01/Nov/2026:02:28:02 +0000] "GET /login HTTP/1.1" 400 524 "-" "-"
koel-1 | 2026-11-01T02:28:20.962479137Z 192.168.64.161 - - [01/Nov/2026:02:28:02 +0000] "GET /login HTTP/1.1" 400 524 "-" "-"
koel-1 | 2026-11-01T02:28:20.962631512Z 192.168.64.161 - - [01/Nov/2026:02:28:02 +0000] "GET /login HTTP/1.1" 400 524 "-" "-"
koel-1 | 2026-11-01T02:28:20.967731929Z 127.0.0.1 - - [01/Nov/2026:02:28:20 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.68 (Debian) PHP/8.4.27 (internal dummy connection)"
koel-1 | 2026-11-01T02:28:21.974368638Z 127.0.0.1 - - [01/Nov/2026:02:28:21 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.68 (Debian) PHP/8.4.27 (internal dummy connection)"
koel-1 | 2026-11-01T02:28:22.975154597Z 127.0.0.1 - - [01/Nov/2026:02:28:22 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.68 (Debian) PHP/8.4.27 (internal dummy connection)" 