Plane is an open-source project management suite replacing Asana and Monday.com with cycles, docs, and self-hosted control without per-seat fees.
Plane was launched in November 2022 as a self-hosted project management platform combining TypeScript, Django, and PostgreSQL under an open-source model. The platform packages issue tracking, sprint cycles, roadmap modules, and collaborative documentation into a unified workspace that teams can run on their own hardware. By running without per-user licensing fees, it provides growing teams with full data ownership and predictable infrastructure overhead.
Proprietary platforms like Asana and Monday.com charge escalating monthly subscriptions that multiply as headcount expands. Small agencies and operations leads frequently encounter steep tier gates where essential features—such as custom project views, milestone roadmaps, and extended history—require upgrading every user to premium pricing. Adding external contractors, temporary specialists, or non-technical contributors quickly turns project management software into one of the largest ongoing line items in a team's software budget.
Plane shifts that economic equation by replacing per-seat SaaS costs with self-managed deployment. Instead of paying twenty dollars per user each month, teams deploy a single instance on standard server infrastructure and invite unlimited team members. While Asana provides a broader catalog of pre-built third-party marketing integrations and simpler onboarding for non-technical departments, Plane matches its core task boards, calendar schedules, and list views while adding dedicated agile sprint cycles and engineering-focused issue tracking that proprietary work trackers reserve for higher price tiers.
Can I self-host Plane for free? Yes. The Community Edition provides issue tracking, cycles, modules, and documentation for unlimited users on self-managed infrastructure without license fees.
Plane vs Asana — which is better for small teams? Asana is easier to introduce across non-technical departments that rely on pre-built third-party business connectors, while Plane delivers significant cost savings and developer-focused agile workflows for technical teams.
What are the minimum server requirements to self-host Plane? The official documentation recommends a server with at least four CPU cores, eight gigabytes of RAM, and thirty gigabytes of persistent storage.
Plane is a practical choice for development teams and operations leads that want to eliminate recurring per-seat software expenses without sacrificing modern sprint planning tools. Its unarchived repository with continuous commits through late 2026 and an AGPL-3.0 license offer long-term transparency for self-hosters, provided your organization does not require out-of-the-box enterprise single sign-on.
These packages install the Plane desktop client, not the server. Each package is matched to Plane through the registry's own link to its source code or website.
brew install --cask planeWe started this exact setup from scratch in a clean Linux machine on Nov 2, 2026 and checked it through Plane's own API: every check passed. Recipes are re-checked regularly and removed if they stop working.
mkdir -p plane && cd plane
curl -fsSL https://open-source.store/tools/plane/compose.yml -o compose.ymlcat > .env <<EOF
APP_DOMAIN=localhost
WEB_URL=http://localhost
CORS_ALLOWED_ORIGINS=http://localhost
SECRET_KEY=$(openssl rand -hex 32)
LIVE_SERVER_SECRET_KEY=$(openssl rand -hex 32)
POSTGRES_PASSWORD=$(openssl rand -hex 12)
RABBITMQ_PASSWORD=$(openssl rand -hex 12)
AWS_ACCESS_KEY_ID=$(openssl rand -hex 16)
AWS_SECRET_ACCESS_KEY=$(openssl rand -hex 32)
AWS_REGION=us-east-1
EOFAPP_DOMAIN — Domain name or IP address of the Plane server; set to your public domain or IP in production.WEB_URL — Public base URL where Plane is reached; set to your server's public URL in production.CORS_ALLOWED_ORIGINS — Allowed origins for CORS requests; set to your public domain in production.SECRET_KEY — Secret key that signs Django sessions and tokens. Generated above; keep it secret.LIVE_SERVER_SECRET_KEY — Secret key for the live collaboration WebSocket server. Generated above; keep it secret.POSTGRES_PASSWORD — Password of the bundled PostgreSQL database. Generated above; keep it secret.RABBITMQ_PASSWORD — Password of the bundled RabbitMQ message broker. Generated above; keep it secret.AWS_ACCESS_KEY_ID — Access key for the bundled S3-compatible object storage (Silo). Generated above; keep it secret.AWS_SECRET_ACCESS_KEY — Secret key for the bundled S3-compatible object storage (Silo). Generated above; keep it secret.AWS_REGION — AWS region name for S3-compatible object storage.docker compose up -dx-db-env: &db-env
PGHOST: plane-db
PGDATABASE: plane
POSTGRES_USER: plane
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: plane
POSTGRES_PORT: 5432
PGDATA: /var/lib/postgresql/data
x-redis-env: &redis-env
REDIS_HOST: plane-redis
REDIS_PORT: 6379
REDIS_URL: redis://plane-redis:6379/
x-minio-env: &minio-env
MINIO_ROOT_USER: ${AWS_ACCESS_KEY_ID}
MINIO_ROOT_PASSWORD: ${AWS_SECRET_ACCESS_KEY}
x-aws-s3-env: &aws-s3-env
AWS_REGION: ${AWS_REGION}
AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
AWS_S3_ENDPOINT_URL: http://plane-minio:9000
AWS_S3_BUCKET_NAME: uploads
x-proxy-env: &proxy-env
APP_DOMAIN: ${APP_DOMAIN}
FILE_SIZE_LIMIT: 5242880
BUCKET_NAME: uploads
SITE_ADDRESS: :80
x-mq-env: &mq-env
RABBITMQ_HOST: plane-mq
RABBITMQ_PORT: 5672
RABBITMQ_DEFAULT_USER: plane
RABBITMQ_DEFAULT_PASS: ${RABBITMQ_PASSWORD}
RABBITMQ_DEFAULT_VHOST: plane
RABBITMQ_VHOST: plane
x-live-env: &live-env
API_BASE_URL: http://api:8000
LIVE_SERVER_SECRET_KEY: ${LIVE_SERVER_SECRET_KEY}
x-app-env: &app-env
WEB_URL: ${WEB_URL}
CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS}
GUNICORN_WORKERS: 1
USE_MINIO: 1
DATABASE_URL: postgresql://plane:${POSTGRES_PASSWORD}@plane-db:5432/plane
SECRET_KEY: ${SECRET_KEY}
AMQP_URL: amqp://plane:${RABBITMQ_PASSWORD}@plane-mq:5672/plane
API_KEY_RATE_LIMIT: 60/minute
MINIO_ENDPOINT_SSL: 0
LIVE_SERVER_SECRET_KEY: ${LIVE_SERVER_SECRET_KEY}
services:
web:
image: makeplane/plane-frontend:v1.4.3
restart: always
depends_on:
- api
- worker
space:
image: makeplane/plane-space:v1.4.3
restart: always
depends_on:
- api
- worker
- web
admin:
image: makeplane/plane-admin:v1.4.3
restart: always
depends_on:
- api
- web
live:
image: makeplane/plane-live:v1.4.3
environment:
<<: [*live-env, *redis-env]
restart: always
depends_on:
- api
- web
api:
image: makeplane/plane-backend:v1.4.3
command: ./bin/docker-entrypoint-api.sh
restart: always
volumes:
- logs_api:/code/plane/logs
environment:
<<: [*app-env, *db-env, *redis-env, *minio-env, *aws-s3-env, *proxy-env]
depends_on:
- plane-db
- plane-redis
- plane-mq
worker:
image: makeplane/plane-backend:v1.4.3
command: ./bin/docker-entrypoint-worker.sh
restart: always
volumes:
- logs_worker:/code/plane/logs
environment:
<<: [*app-env, *db-env, *redis-env, *minio-env, *aws-s3-env, *proxy-env]
depends_on:
- api
- plane-db
- plane-redis
- plane-mq
beat-worker:
image: makeplane/plane-backend:v1.4.3
command: ./bin/docker-entrypoint-beat.sh
restart: always
volumes:
- logs_beat-worker:/code/plane/logs
environment:
<<: [*app-env, *db-env, *redis-env, *minio-env, *aws-s3-env, *proxy-env]
depends_on:
- api
- plane-db
- plane-redis
- plane-mq
migrator:
image: makeplane/plane-backend:v1.4.3
command: ./bin/docker-entrypoint-migrator.sh
restart: "no"
volumes:
- logs_migrator:/code/plane/logs
environment:
<<: [*app-env, *db-env, *redis-env, *minio-env, *aws-s3-env, *proxy-env]
depends_on:
- plane-db
- plane-redis
plane-db:
image: postgres:15.7-alpine
restart: always
environment:
<<: *db-env
volumes:
- pgdata:/var/lib/postgresql/data
plane-redis:
image: valkey/valkey:7.2.11-alpine
restart: always
volumes:
- redisdata:/data
plane-mq:
image: rabbitmq:3.13.6-management-alpine
restart: always
environment:
<<: *mq-env
volumes:
- rabbitmq_data:/var/lib/rabbitmq
plane-minio:
image: docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z
command: server /export --console-address ":9090"
restart: always
environment:
<<: *minio-env
volumes:
- uploads:/export
proxy:
image: makeplane/plane-proxy:v1.4.3
restart: always
environment:
<<: *proxy-env
ports:
- "80:80"
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:80/api/instances/ || exit 1"]
interval: 10s
timeout: 5s
retries: 30
start_period: 30s
volumes:
- proxy_config:/config
- proxy_data:/data
depends_on:
- web
- api
- space
- admin
- live
volumes:
pgdata:
redisdata:
uploads:
logs_api:
logs_worker:
logs_beat-worker:
logs_migrator:
rabbitmq_data:
proxy_config:
proxy_data:
Free IDE for Java, Kotlin, Go, TypeScript and Python. Built on IntelliJ Community, fully open source, 300+ plugins.
Show that Plane is listed as an open-source alternative. Paste into your README:
Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 589 s: rabbitmq:3.13.6-management-alpine, makeplane/plane-admin:v1.4.3, postgres:15.7-alpine, valkey/valkey:7.2.11-alpine, makeplane/plane-backend:v1.4.3, makeplane/plane-live:v1.4.3, makeplane/plane-frontend:v1.4.3, makeplane/plane-backend:v1.4.3, makeplane/plane-backend:v1.4.3, makeplane/plane-proxy:v1.4.3, makeplane/plane-backend:v1.4.3, makeplane/plane-space:v1.4.3, docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z.
Based on the upstream setup. Official release compose. Image tags pinned to v1.4.3; secrets moved to .env; proxy published on port 80; healthcheck added to proxy.
web-1 | 2026-11-02T00:39:22.144354835Z 192.168.65.219 - - [02/Nov/2026:00:39:22 +0000] "GET /common/setup.php HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" web-1 | 2026-11-02T00:39:22.144402960Z 192.168.65.219 - - [02/Nov/2026:00:39:22 +0000] "GET /common/setup.php HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:22.144490335Z 192.168.65.219 - - [02/Nov/2026:00:39:22 +0000] "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.085968586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /src/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.086433377Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /rest/users/1/settings/ HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.086755044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0" web-1 | 2026-11-02T00:39:23.092675169Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.094006211Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /install/information/database HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.094795252Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /install/information/database HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.095115586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /intikal/storage/ HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Firefox/102.0" web-1 | 2026-11-02T00:39:23.095499002Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /jsonapi/user/user HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" web-1 | 2026-11-02T00:39:23.095787044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /pimcore/app/config/pimcore/google-api-private-key.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 108) AppleWebKit/536.15 (KHTML like Gecko) Version/6.0 Safari/536.16" web-1 | 2026-11-02T00:39:23.096438544Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /jsonapi/user/user HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.1" web-1 | 2026-11-02T00:39:23.097523586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /src/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.097977169Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /appveyor.yml HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.098282086Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; CrOS x86_64 14092.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.107 Safari/537.36" web-1 | 2026-11-02T00:39:23.098745836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /index.php?SQ=0&srch=x\x22+onmouseover%3Dalert%281%29+x%3D\x22&t=search&btn_submit.x=0&btn_submit.y=0 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.101314127Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\x5C&refurl=}}};alert(document.domain)// HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" web-1 | 2026-11-02T00:39:23.102238836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /V1.0%3CsVg/onload=alert.bind%28%29%281%29%3E/Alarm/Exceptions/LinkageActions HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36" web-1 | 2026-11-02T00:39:23.106747752Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /dana/home/index.cgi HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.106759877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /index.php?SQ=0&srch=x\x22+onmouseover%3Dalert%281%29+x%3D\x22&t=search&btn_submit.x=0&btn_submit.y=0 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3" web-1 | 2026-11-02T00:39:23.106997836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; ja-JP) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" web-1 | 2026-11-02T00:39:23.107261502Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0" web-1 | 2026-11-02T00:39:23.108356794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /V1.0%3CsVg/onload=alert.bind%28%29%281%29%3E/Alarm/Exceptions/LinkageActions HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/604.1" web-1 | 2026-11-02T00:39:23.108385961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\x5C&refurl=}}};alert(document.domain)// HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.108416961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /cgi-bin/cosmobdf.cgi?function=0 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.108944794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/4.0" web-1 | 2026-11-02T00:39:23.108949336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /cgi-bin/cosmobdf.cgi?function=0 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.109304336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /flatpress/fp-content/ HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36" web-1 | 2026-11-02T00:39:23.109747336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.109751336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /yyoa/common/js/menu/test.jsp?doType=101&S1=(SELECT%20md5(999999999)) HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10.15, rv:140.0) Gecko/20100101 Firefox/140.0" web-1 | 2026-11-02T00:39:23.109893377Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.110901127Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /inc/supportLoad.asp?urlToLoad=http://oast.me HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" web-1 | 2026-11-02T00:39:23.111305044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" web-1 | 2026-11-02T00:39:23.111517044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /inc/supportLoad.asp?urlToLoad=http://oast.me HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.111520752Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /wp-admin/admin.php?page=Accessibility&%22%3E%3Cscript%3Ealert%28%22document_domain%22%29%3C/script%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" web-1 | 2026-11-02T00:39:23.111741877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.111744544Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /yyoa/common/js/menu/test.jsp?doType=101&S1=(SELECT%20md5(999999999)) HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0" web-1 | 2026-11-02T00:39:23.111745919Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /pimcore/app/config/pimcore/google-api-private-key.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.113432794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /.authorized_keys HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.113534502Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /wp-admin/admin.php?page=Accessibility&%22%3E%3Cscript%3Ealert%28%22document_domain%22%29%3C/script%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.7 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.113573002Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /rest/users/1/settings/ HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.113825336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /source/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.113827461Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /elocker_old/storage/ HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.113837169Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /lfm.php HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.113838419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.114240336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /source/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:124.0) Gecko/20100101 Firefox/124.0" web-1 | 2026-11-02T00:39:23.114242794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /xwiki/bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.114243919Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /lfm.php HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0" web-1 | 2026-11-02T00:39:23.116190377Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /cgi-bin/cosmobdf.cgi?function=1 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:140.0) Gecko/20100101 Firefox/140.0" web-1 | 2026-11-02T00:39:23.116224669Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /www/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.116511627Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /www/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" web-1 | 2026-11-02T00:39:23.116635461Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /xwiki/bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" web-1 | 2026-11-02T00:39:23.117067461Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vsaPres/Web20/core/LocalProxy.ashx?url=http://oast.me HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.117392877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vsaPres/Web20/core/LocalProxy.ashx?url=http://oast.me HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.3 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.117428877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /web/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" web-1 | 2026-11-02T00:39:23.117457044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /cgi-bin/cosmobdf.cgi?function=1 HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.117849252Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /web/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.118049961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /site/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/115.0" web-1 | 2026-11-02T00:39:23.118465961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /sites/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.118786086Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /site/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14" web-1 | 2026-11-02T00:39:23.119034919Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /private/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.119389794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /sites/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.119406211Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secure/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.119861544Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /private/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_1 rv:6.0; vi-VN) AppleWebKit/535.6.1 (KHTML, like Gecko) Version/4.1 Safari/535.6.1" web-1 | 2026-11-02T00:39:23.119864211Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secret/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" web-1 | 2026-11-02T00:39:23.120190461Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secrets/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected])" web-1 | 2026-11-02T00:39:23.120574377Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /env/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; nl-nl) AppleWebKit/527+ (KHTML, like Gecko) Version/3.1.1 Safari/525.20" web-1 | 2026-11-02T00:39:23.120580419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secure/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/16.3 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.120936002Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /environment/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.121208419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secret/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" web-1 | 2026-11-02T00:39:23.121246711Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /test/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.121530044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /secrets/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:139.0) Gecko/20100101 Firefox/139.0" web-1 | 2026-11-02T00:39:23.121558169Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /tests/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.121873544Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /dev/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.121896961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /env/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.122398836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /environment/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.122401419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /development/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.122719961Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /test/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 6.2; rv:128.12) Gecko/20100101 Firefox/128.12" web-1 | 2026-11-02T00:39:23.122820419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /staging/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.122942877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /tests/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.123254794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /dev/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.123524919Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /prod/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.123889502Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /production/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.123907586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /development/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" web-1 | 2026-11-02T00:39:23.124277586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /staging/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.124616586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /includes/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.124708544Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /prod/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36" web-1 | 2026-11-02T00:39:23.124982461Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /include/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/15.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.125262377Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /production/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14" web-1 | 2026-11-02T00:39:23.125595086Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /includes/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.125681294Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /lib/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.126024336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /include/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.126074002Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /libs/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.126427044Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /library/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Whale/4.32.315.22 Safari/537.36" web-1 | 2026-11-02T00:39:23.126429419Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /lib/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.126735252Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vendor/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.127118836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /libs/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.127195877Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vendors/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" web-1 | 2026-11-02T00:39:23.127457211Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /node_modules/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.11" web-1 | 2026-11-02T00:39:23.127697086Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /library/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0" web-1 | 2026-11-02T00:39:23.127834836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /storage/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.2" web-1 | 2026-11-02T00:39:23.128196836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /database/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" web-1 | 2026-11-02T00:39:23.128327586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vendor/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" web-1 | 2026-11-02T00:39:23.128591336Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /vendors/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5" web-1 | 2026-11-02T00:39:23.128777127Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /db/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/7.0" web-1 | 2026-11-02T00:39:23.129005794Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /node_modules/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.129631127Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /storage/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" web-1 | 2026-11-02T00:39:23.129960586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /database/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2 rv:2.0; mai-IN) AppleWebKit/533.27.1 (KHTML, like Gecko) Version/5.0 Safari/533.27.1" web-1 | 2026-11-02T00:39:23.130419752Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /db/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" web-1 | 2026-11-02T00:39:23.132065002Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /authentication/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0" web-1 | 2026-11-02T00:39:23.132360086Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /oauth/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/7.1.2 Safari/537.85.11" web-1 | 2026-11-02T00:39:23.132873252Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /keys/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.133323627Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /credentials/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:109.0) Gecko/20100101 Firefox/115.0" web-1 | 2026-11-02T00:39:23.133649711Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /creds/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.134194752Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /authentication/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" web-1 | 2026-11-02T00:39:23.134594586Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /oauth/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0" web-1 | 2026-11-02T00:39:23.135002294Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /keys/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0" web-1 | 2026-11-02T00:39:23.135370836Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /credentials/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0" web-1 | 2026-11-02T00:39:23.135731252Z 192.168.65.219 - - [02/Nov/2026:00:39:23 +0000] "GET /creds/auth.json HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"