Penpot

Limitations

• Canvas panning and rendering can stutter on massive files with hundreds of complex nested artboards due to browser SVG rendering limits.
• Component variant tooling is less comprehensive than Figma's multi-property variant matrices, requiring manual workarounds for complex interactive states.
• Exporting heavy PDFs or multi-layer graphic bundles occasionally triggers timeouts, a recurring issue documented in community bug reports.
• Self-hosting requires managing a multi-container Docker stack including PostgreSQL and Redis that needs at least 4 GB of server memory.

Who should use it

• Product managers and project leads who need to build rapid wireframes and gather stakeholder feedback without purchasing per-seat software licenses.
• Cross-functional product teams who want copywriters, marketers, and design contributors collaborating in a shared browser space governed by real web layout rules.
• Privacy-conscious organizations and non-profit groups that require self-hosted software to keep confidential wireframes and user research inside private infrastructure.

FAQ

Can Penpot replace Figma for product design? Penpot replaces Figma for wireframing, UI layout, and interactive prototyping, though teams relying on complex component variants or thousands of third-party plugins will face migration friction.

Is Penpot free for commercial projects? Yes, Penpot is free to use on its hosted cloud service and free to deploy on private servers without user caps or feature paywalls.

Can I self-host Penpot on my own servers? Yes, organizations can self-host Penpot using official Docker containers, requiring a server with at least 4 GB of RAM and standard PostgreSQL and Redis instances.

Verdict

Penpot is an ideal fit for product managers, cross-functional teams, and non-technical stakeholders who want open, web-standards design collaboration without recurring per-seat subscription fees. Its MPL-2.0 open-source code ensures organizations retain full ownership of their design files and can deploy the software on private servers. Backed by active maintenance and continuous updates through late 2026, Penpot serves as a dependable production platform, provided your team does not depend on a commercial plugin marketplace.

Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 560 s: axllent/mailpit:v1.33.0, postgres:15, penpotapp/admin-console:2.18.5, penpotapp/exporter:2.18.5, penpotapp/backend:2.18.5, penpotapp/mcp:2.18.5, penpotapp/frontend:2.18.5, valkey/valkey:8.1.

Based on the upstream setup. Official compose with every service (frontend, backend, exporter, admin console, MCP, Postgres, Valkey, Mailpit); image tags pinned to 2.18.5 and mailpit to v1.33.0; secret key and database password moved to .env; mailpit kept internal.

penpot-frontend-1       | 2026-11-01T23:13:01.489488842Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/badge/1/ping/24 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" us=404 uct=0.000 urt=0.001 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:01.497543550Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /serverless.yml HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.13" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.500764967Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET / HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) ConnectPC Safari/537.36 Browser" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.500768717Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=http/.....///.....///config/config_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.500770092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET //interact.sh/en/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.500771175Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=http/.....///.....///config/config_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/10.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.510317467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET / HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.510322884Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=.....///http/.....///config/config_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.510324592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=.....///http/.....///config/config_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.510325759Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET //interact.sh/en HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.513518717Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /serverless.yml HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.518339425Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /pacts HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.518346092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.518352300Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=http\x5C\x5C..\x5C\x5C..\x5C\x5Cconfig\x5C\x5Cconfig_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.518354009Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /include/thumb.php?dir=http\x5C\x5C..\x5C\x5C..\x5C\x5Cconfig\x5C\x5Cconfig_db.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.525378634Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /pacts HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.528638342Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /behat.yml.dist HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:78.0) Gecko/20100101 Firefox/78.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.532500634Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.6" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.532506092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET //Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.542815842Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.6" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.542822550Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /ui/relationships HTTP/1.1" 301 162 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.542824050Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /ui/relationships HTTP/1.1" 301 162 "-" "Moz111a/5.0 (1Pad; CPU 0S 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.542825175Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.544217592Z 2026/11/01 23:13:01 [error] 14#14: *13471 open() "/var/www/app/js/log.js" failed (2: No such file or directory), client: 192.168.65.191, server: _, request: "GET /js/log.js HTTP/1.1", host: "oss-verify.example"
penpot-frontend-1       | 2026-11-01T23:13:01.544224467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /behat.yml.dist HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.544226175Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /elfinder/elfinder-cke.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.544231092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /setup/setupcluster-start.action HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.544232217Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /js/log.js HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.552046175Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /dashboard.aspx HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.553374467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.553377592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /libs/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_7; en-us) AppleWebKit/534.16+ (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.553378925Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.567332425Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /file?valore=../../../../../windows/win.ini HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.575385384Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /file?valore=../../../../../windows/win.ini HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8.1 Mobile/15E148 Safari/604.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.583388592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /downloadFile.php?file=config HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.591193342Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.598877092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /index.php?q=hiring&search=URC%27%20union%20select%201,2,3,4,5,6,7,8,9,md5(999999999),11,12,13,14,15,16,17,18,19--+ HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0: Win64: x64: rv:140.0) Gecko/20100101 Firefox/140.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607461300Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /dashboard.aspx HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607481592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /mobile-app/v3/?pid=77A89299&isMobile=%20clq95%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Elb1ra HTTP/1.1" 301 162 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607490759Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /boafrm/formWlanRedirect?redirect-url=http://interact.sh&wlan_id=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/4.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607492175Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /lib/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607493467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /wp-content/ewww/debug.log HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.19" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607494592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607496217Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /../../../../../etc/passwd HTTP/1.1" 400 150 "-" "-" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.607497092Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /../../../../../etc/passwd HTTP/1.1" 400 150 "-" "-" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.614798550Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /serverless.yaml HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.622528259Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /serverless.yaml HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.622535467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/stats HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0" us=404 uct=0.150 urt=0.302 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:01.630811592Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.630824717Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET //interact.sh/en/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:01.630826467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/modular-connector/login/racyv/?origin=mo&type=foo HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15" us=404 uct=0.152 urt=0.169 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:01.630833009Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" us=404 uct=0.152 urt=0.169 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:01.630834467Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.19" us=404 uct=0.152 urt=0.169 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:01.630835717Z 192.168.65.191 - - [01/Nov/2026:23:13:01 +0000] "GET /api/badge/1/ping/24 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" us=404 uct=0.008 urt=0.008 ua=172.18.0.8:6060
penpot-frontend-1       | 2026-11-01T23:13:02.300406301Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.300446717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.302835676Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 400 150 "-" "-" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.302860342Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.302865092Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /debug/pprof/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.319914759Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /haproxy-status HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323303509Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET / HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323526051Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /debug/pprof/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323579426Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /wp-json/mrm/v1/wp/admins?term=@ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323609717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /data/plugins_listing HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_1 rv:6.0; vi-VN) AppleWebKit/535.6.1 (KHTML, like Gecko) Version/4.1 Safari/535.6.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323662634Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /horizon/api/stats HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323691092Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /command/prima-factory.cgi HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323724051Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6_6; de) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.323753217Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //interact.sh/en HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/125.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.324794301Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /library/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.325136717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.329686884Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1 HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.336344467Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /haproxy-status HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.336381842Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 400 150 "-" "-" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337484717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1 HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337487301Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /uploads/assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337488634Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /libs/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337489759Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /wp-json/mrm/v1/wp/admins?term=@ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337495592Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /data/plugins_listing HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.4" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.337496842Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /command/prima-factory.cgi HTTP/1.1" 301 162 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.344857926Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET / HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.344862092Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /debug/pprof/goroutine?debug=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.344863426Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.348689967Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /lander HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Mobile/15E148 Safari/604.1" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.348909717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /vendor/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.349040301Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /debug/pprof/goroutine?debug=1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.349226509Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.352467426Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /haproxy?stats HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.352470801Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /library/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.352472092Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /uploads/assets/backend/elfinder/elfinder.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360000426Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /lander HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360007384Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /vendors/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/6.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360008801Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /uploads/elfinder/elfinder-cke.html HTTP/1.1" 301 162 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360009967Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /vendor/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360011009Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /vendors/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360012134Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /node_modules/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360013176Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /node_modules/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360014134Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /storage/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360021342Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /storage/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360292884Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /database/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360295259Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /database/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360296426Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /db/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360297717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /db/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360457009Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /auth/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360464009Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /auth/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360866759Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /authentication/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360869717Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /authentication/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360871009Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /oauth/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360889676Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /oauth/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360891092Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /keys/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360892176Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /keys/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.360987509Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /credentials/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.361133467Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /credentials/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.361140259Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /creds/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_7; en-us) AppleWebKit/534.16+ (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.361317467Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /creds/auth.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.361705634Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /haproxy?stats HTTP/1.1" 200 69567 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.361753967Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.362252759Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13) AppleWebKit/619.4 (KHTML, like Gecko) Version/16.1.13 Safari/619.4" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.362465759Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.362831884Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET /Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" us=- uct=- urt=- ua=-
penpot-frontend-1       | 2026-11-01T23:13:02.363084551Z 192.168.65.191 - - [01/Nov/2026:23:13:02 +0000] "GET //Ui80sxsJ%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" us=- uct=- urt=- ua=-