Open WebUI is a self-hosted ChatGPT alternative that connects to local and cloud LLMs with built-in RAG, granular RBAC, and complete data privacy.
Open WebUI is a self-hosted web interface for local and cloud language models that mirrors the ChatGPT interaction model. Its execution connects directly to offline runners and OpenAI-compatible endpoints, keeping prompts, attachments, and chat history inside internal infrastructure. Built-in document retrieval and role-based access control allow engineering organizations to deploy private AI workspaces without sending data off-premises.
ChatGPT processes queries on OpenAI cloud infrastructure, where confidentiality policies and data residency rules dictate how tokens travel over the public internet. Open WebUI replaces that external dependency by hosting the chat interface on your own hardware or Kubernetes clusters. Paired with local runtimes like Ollama or vLLM, zero prompt bytes or uploaded files leave the private network. Teams can also route requests through internal gateways, retaining full audit logs without exposing user sessions to third parties.
The tradeoff is operational responsibility. ChatGPT delivers turnkey access to frontier models with zero maintenance, automatic scaling, and managed document ingestion. Open WebUI requires DevOps teams to provision compute, attach vector databases like Qdrant or PGVector for retrieval-augmented generation, configure Redis for multi-node WebSocket sessions, and manage model downloads. For teams handling proprietary source code or regulated data, self-hosting is the only path to complete data isolation.
Is Open WebUI free for commercial use? Yes, Open WebUI is open-source software usable commercially on internal servers, with separate enterprise licenses available for custom branding and SLAs.
Open WebUI vs ChatGPT — which should engineering teams choose? ChatGPT provides instant access to hosted frontier models with zero operational maintenance, whereas Open WebUI gives complete data sovereignty and local model routing at the cost of managing your own infrastructure.
Can Open WebUI run without an internet connection? Yes, it operates in fully air-gapped environments when connected to local inference backends like Ollama with offline flags enabled.
Open WebUI is the standard choice when data privacy, auditability, and local model orchestration outweigh the convenience of managed SaaS interfaces, but it requires dedicated compute and container maintenance to run reliably. Active development with daily updates in September 2026 and a permissive MIT license make it straightforward to adopt internally without recurring per-seat fees. Teams without GPU capacity or DevOps resources to maintain private servers should remain on managed cloud alternatives.
Commands from the official package registries. Each package is matched to Open WebUI through the registry's own link to its source code or website.
brew install --cask open-webuiwinget install --id OpenWebUI.OpenWebUI -eflatpak install flathub com.openwebui.open-webuiWe started this exact setup from scratch in a clean Linux machine on Nov 1, 2026 and checked it through Open WebUI's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p open-webui && cd open-webui
curl -fsSL https://open-source.store/tools/open-webui/compose.yml -o compose.ymlcat > .env <<EOF
WEBUI_SECRET_KEY=$(openssl rand -hex 32)
WEBUI_URL=http://localhost:3000
ADMIN_PASSWORD=$(openssl rand -hex 12)
EOFWEBUI_SECRET_KEY — Random string that signs login tokens. Generated above; keep it secret.WEBUI_URL — Public URL where users reach Open WebUI. Set to your domain or public IP in production.ADMIN_PASSWORD — Password used by smoke tests to register the initial administrator account. Generated above; keep it secret.docker compose up -dservices:
open-webui:
image: ghcr.io/open-webui/open-webui:0.12.5
volumes:
- open-webui:/app/backend/data
ports:
- "3000:8080"
environment:
- ENABLE_OLLAMA_API=false
- WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}
- WEBUI_URL=${WEBUI_URL}
extra_hosts:
- host.docker.internal:host-gateway
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "curl --silent --fail http://localhost:8080/health | jq -ne 'input.status == true' || exit 1"]
interval: 10s
timeout: 5s
retries: 3
start_period: 300s
volumes:
open-webui: {}
Free IDE for Java, Kotlin, Go, TypeScript and Python. Built on IntelliJ Community, fully open source, 300+ plugins.
Show that Open WebUI is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 236 s: ghcr.io/open-webui/open-webui:0.12.5.
Based on the upstream setup. Official compose without the bundled Ollama service (no GPU or models needed to start). Image pinned to 0.12.5, Ollama API off until you connect a model server, session secret and public URL moved to .env, healthcheck given a start period because the first start downloads the embedding model.
open-webui-1 | 2026-11-01T21:56:18.497758097Z 2026-11-01 21:56:18.497 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42320 - "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.498796138Z 2026-11-01 21:56:18.498 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:41718 - "GET /goanywhere/license/Unlicensed.xhtml/ujkhc?javax.faces.ViewState=ujkhc&GARequestAction=activate HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.498965222Z 2026-11-01 21:56:18.498 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42462 - "GET /app_test.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.499118555Z 2026-11-01 21:56:18.499 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /install/index.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.499348638Z 2026-11-01 21:56:18.499 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42392 - "GET /app_test.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.499673263Z 2026-11-01 21:56:18.499 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42892 - "GET /%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.499945513Z 2026-11-01 21:56:18.499 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42326 - "GET /javax.faces.resources/faces-config.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.501067763Z 2026-11-01 21:56:18.500 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42584 - "GET /posts?authorMatch={"$and":[{"$where":"this.isAdmin"}]} HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.501193097Z 2026-11-01 21:56:18.501 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42476 - "GET /Forms/rpAuth_1?id=</form><iMg%20src=x%20onerror="prompt(document.domain)"><form> HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.501565347Z 2026-11-01 21:56:18.501 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42878 - "GET /%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.504251513Z 2026-11-01 21:56:18.504 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42356 - "GET /Forms/rpAuth_1?id=</form><iMg%20src=x%20onerror="prompt(document.domain)"><form> HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.504496222Z 2026-11-01 21:56:18.504 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:41232 - "GET /goanywhere/license/Unlicensed.xhtml/ujkhc?javax.faces.ViewState=ujkhc&GARequestAction=activate HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.504824055Z 2026-11-01 21:56:18.504 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42322 - "GET /settings.php.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.506409597Z 2026-11-01 21:56:18.506 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42498 - "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.506609680Z 2026-11-01 21:56:18.506 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42540 - "GET /settings.php.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.507407180Z 2026-11-01 21:56:18.507 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42544 - "GET /web/static/c%3A/windows/win.ini HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.508506263Z 2026-11-01 21:56:18.508 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42554 - "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.509478805Z 2026-11-01 21:56:18.509 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42514 - "GET /jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.510088680Z 2026-11-01 21:56:18.510 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42656 - "GET /web/static/c%3A/windows/win.ini HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.510274930Z 2026-11-01 21:56:18.510 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42528 - "GET /7/0/33/1d/www.citysearch.com/search?what=x&where=place%22%3E%3Csvg+onload=confirm(document.domain)%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.510915638Z 2026-11-01 21:56:18.510 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42444 - "GET /assets/login?a=https://interact.sh HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.511119138Z 2026-11-01 21:56:18.511 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42474 - "GET /7/0/33/1d/www.citysearch.com/search?what=x&where=place%22%3E%3Csvg+onload=confirm(document.domain)%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.511225055Z 2026-11-01 21:56:18.511 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42810 - "GET /../../../../../../../../../../../../etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.511368888Z 2026-11-01 21:56:18.511 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42642 - "GET /assets/login?a=https://interact.sh HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.511494722Z 2026-11-01 21:56:18.511 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42652 - "GET /geoserver/rest.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.512273305Z 2026-11-01 21:56:18.512 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42826 - "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.512627638Z 2026-11-01 21:56:18.512 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42840 - "GET /secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.512780638Z 2026-11-01 21:56:18.512 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42766 - "GET /?SPAI_VJS=%3C/script%3E%3Cimg%20src%3D1%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.513683847Z 2026-11-01 21:56:18.513 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42668 - "GET /secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.513830972Z 2026-11-01 21:56:18.513 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42550 - "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514120097Z 2026-11-01 21:56:18.513 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42678 - "GET /../../../../../../../../../../../../etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514138388Z 2026-11-01 21:56:18.514 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42572 - "GET /geoserver/rest.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514359222Z 2026-11-01 21:56:18.514 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42894 - "GET /index.php?option=com_jradio&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514528472Z 2026-11-01 21:56:18.514 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42852 - "GET /index.php?option=com_jradio&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514673347Z 2026-11-01 21:56:18.514 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42736 - "GET / HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.514823055Z 2026-11-01 21:56:18.514 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42388 - "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.515057472Z 2026-11-01 21:56:18.515 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42854 - "GET /?SPAI_VJS=%3C/script%3E%3Cimg%20src%3D1%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.515213138Z 2026-11-01 21:56:18.515 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42342 - "GET /jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.515360138Z 2026-11-01 21:56:18.515 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42702 - "GET / HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.515505430Z 2026-11-01 21:56:18.515 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42454 - "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.515649222Z 2026-11-01 21:56:18.515 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42596 - "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.517123055Z 2026-11-01 21:56:18.517 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42780 - "GET /elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.517286347Z 2026-11-01 21:56:18.517 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42402 - "GET /icinga2/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.517710180Z 2026-11-01 21:56:18.517 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42696 - "GET /icinga2/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.517920138Z 2026-11-01 21:56:18.517 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42764 - "GET /elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.518577472Z 2026-11-01 21:56:18.518 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42056 - "GET /command/prima-factory.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.518821847Z 2026-11-01 21:56:18.518 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42462 - "GET /license/Unlicensed.xhtml/ujkhc?javax.faces.ViewState=ujkhc&GARequestAction=activate HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.518985805Z 2026-11-01 21:56:18.518 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42724 - "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.519134180Z 2026-11-01 21:56:18.519 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42798 - "GET /command/prima-factory.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:18.519291430Z 2026-11-01 21:56:18.519 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42414 - "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.389041930Z 2026-11-01 21:56:19.388 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /test.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.392236305Z 2026-11-01 21:56:19.392 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55998 - "GET /?gf_page=randomstring HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.392671847Z 2026-11-01 21:56:19.392 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55960 - "GET /etc/acs-commons/jcr-compare.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.393225514Z 2026-11-01 21:56:19.392 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56000 - "GET /config/initializers/secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.393256055Z 2026-11-01 21:56:19.393 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56060 - "GET /?wpedon-stripe-checkout-redirect=1&sk=nucleitest&ai=nucleitest&si=nucleitest&rf=//oast.pro HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.393424555Z 2026-11-01 21:56:19.393 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:41718 - "GET /etc/acs-commons/jcr-compare.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.393607847Z 2026-11-01 21:56:19.393 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56014 - "GET /?gf_page=randomstring HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.393794722Z 2026-11-01 21:56:19.393 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42392 - "GET /test.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.395574430Z 2026-11-01 21:56:19.395 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55978 - "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.397130722Z 2026-11-01 21:56:19.397 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55962 - "GET /uploads/assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.399347305Z 2026-11-01 21:56:19.399 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56038 - "GET /config/initializers/secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.400260430Z 2026-11-01 21:56:19.400 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56076 - "GET /../../../../../../../../../../../../windows/iis.log HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.400676389Z 2026-11-01 21:56:19.400 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56020 - "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.401753764Z 2026-11-01 21:56:19.401 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56024 - "GET /license/Unlicensed.xhtml/ujkhc?javax.faces.ViewState=ujkhc&GARequestAction=activate HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.404314930Z 2026-11-01 21:56:19.404 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56100 - "GET /?wpedon-stripe-checkout-redirect=1&sk=nucleitest&ai=nucleitest&si=nucleitest&rf=//oast.pro HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.404547764Z 2026-11-01 21:56:19.404 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42892 - "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.404777305Z 2026-11-01 21:56:19.404 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56048 - "GET /config/settings.old.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.405503472Z 2026-11-01 21:56:19.405 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55984 - "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.405647264Z 2026-11-01 21:56:19.405 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56116 - "GET /config/settings.old.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.408075430Z 2026-11-01 21:56:19.407 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56212 - "GET /login.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.408487055Z 2026-11-01 21:56:19.408 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56140 - "GET /CFIDE/wizards/common/_logintowizard.cfm?%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.408885764Z 2026-11-01 21:56:19.408 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56196 - "GET /icinga-web/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.409171180Z 2026-11-01 21:56:19.409 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56112 - "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.409448347Z 2026-11-01 21:56:19.409 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56182 - "GET /base/static/c%3A/windows/win.ini HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.409681806Z 2026-11-01 21:56:19.409 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56084 - "GET /login HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.409857931Z 2026-11-01 21:56:19.409 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56220 - "GET /login.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.410035847Z 2026-11-01 21:56:19.409 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56050 - "GET /../../../../../../../../../../../../windows/iis.log HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.410211681Z 2026-11-01 21:56:19.410 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56126 - "GET /login HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.411002889Z 2026-11-01 21:56:19.410 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56138 - "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.411529097Z 2026-11-01 21:56:19.411 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56208 - "GET /examples/jsp/snp/anything.snp HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.412550139Z 2026-11-01 21:56:19.412 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56180 - "GET /uploads/assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.412875097Z 2026-11-01 21:56:19.412 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /icinga-web/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.414410056Z 2026-11-01 21:56:19.414 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56136 - "GET /base/static/c%3A/windows/win.ini HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.414869889Z 2026-11-01 21:56:19.414 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:41718 - "GET /etc/acs-commons/workflow-remover.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.414890597Z 2026-11-01 21:56:19.414 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /symfony/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.415563389Z 2026-11-01 21:56:19.415 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56164 - "GET /CFIDE/wizards/common/_logintowizard.cfm?%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.415722597Z 2026-11-01 21:56:19.415 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56188 - "GET /examples/jsp/snp/anything.snp HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.416912181Z 2026-11-01 21:56:19.416 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56154 - "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.417992389Z 2026-11-01 21:56:19.417 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56038 - "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.418081181Z 2026-11-01 21:56:19.418 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55960 - "GET /etc/acs-commons/workflow-remover.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.418253306Z 2026-11-01 21:56:19.418 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42392 - "GET /symfony/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.418419347Z 2026-11-01 21:56:19.418 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56000 - "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.421771222Z 2026-11-01 21:56:19.421 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55978 - "GET /uploads/assets/backend/elfinder/elfinder.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.421800556Z 2026-11-01 21:56:19.421 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55984 - "GET /config.php.bak HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.423006889Z 2026-11-01 21:56:19.422 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56076 - "GET /config.php.bak HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.423491389Z 2026-11-01 21:56:19.423 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56212 - "GET /uploads/assets/backend/elfinder/elfinder.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.425174639Z 2026-11-01 21:56:19.424 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /debug/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.426964347Z 2026-11-01 21:56:19.426 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /etc/acs-commons/version-compare.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.427834514Z 2026-11-01 21:56:19.427 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56164 - "GET /etc/acs-commons/version-compare.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.428999931Z 2026-11-01 21:56:19.428 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55978 - "GET /uploads/elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.429130681Z 2026-11-01 21:56:19.429 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56000 - "GET /debug/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.429793514Z 2026-11-01 21:56:19.429 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56076 - "GET /config.php.dist HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.431588972Z 2026-11-01 21:56:19.431 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56212 - "GET /uploads/elfinder/elfinder-cke.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.431795014Z 2026-11-01 21:56:19.431 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55984 - "GET /config.php.dist HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.433180681Z 2026-11-01 21:56:19.433 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /dev/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.434404514Z 2026-11-01 21:56:19.434 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /etc/acs-commons/oak-index-manager.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.434748014Z 2026-11-01 21:56:19.434 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56164 - "GET /etc/acs-commons/oak-index-manager.html HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.435526722Z 2026-11-01 21:56:19.435 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:55978 - "GET /dev/_profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.435706056Z 2026-11-01 21:56:19.435 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56076 - "GET /config.php.old HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.436835597Z 2026-11-01 21:56:19.436 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56212 - "GET /config.php.old HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.438731889Z 2026-11-01 21:56:19.438 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.439061722Z 2026-11-01 21:56:19.438 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56076 - "GET /config.php.save HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.439675056Z 2026-11-01 21:56:19.439 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /profiler/empty/search/results?limit=10 HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.440376639Z 2026-11-01 21:56:19.440 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56212 - "GET /config.php.save HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.442056056Z 2026-11-01 21:56:19.441 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /.config.php.swp HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.443083597Z 2026-11-01 21:56:19.443 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /.config.php.swp HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.444521722Z 2026-11-01 21:56:19.444 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /config.php.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.446034681Z 2026-11-01 21:56:19.445 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:42788 - "GET /config/settings.old.php HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.446157889Z 2026-11-01 21:56:19.446 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /config.php.txt HTTP/1.1" 200
open-webui-1 | 2026-11-01T21:56:19.447467597Z 2026-11-01 21:56:19.447 | INFO | uvicorn.protocols.http.httptools_impl:send:482 - 192.168.65.161:56186 - "GET /config/settings.old.php HTTP/1.1" 200