Overview

YOURLS is a self-hosted URL shortener built in PHP that runs directly on your own web server. Instead of routing traffic through third-party services and paying monthly subscription fees for branded links, it keeps every shortened URL, click timestamp, and referral record inside your private database.

Why YOURLS instead of TinyURL

TinyURL provides a managed service where operational overhead is non-existent because the vendor handles servers, redirection infrastructure, and SSL certificates. That convenience carries operational constraints: you rely on third-party uptime, accept vendor domain branding unless you pay monthly fees, and risk broken links if billing lapses or terms change. For users who only want to shorten an occasional link without managing software, TinyURL requires zero setup.

YOURLS shifts operational control directly to the host. You provide a PHP runtime and a MySQL or MariaDB database on shared hosting, a virtual server, or a Docker container. Operating the service is straightforward because configuration lives in a single PHP file with database credentials. Upgrades involve replacing core files or updating a container image without restructuring database tables. The trade-off is operational responsibility: you must configure DNS records, manage HTTPS certificates, perform database backups, and monitor server availability. For organizations seeking unmetered custom short domains without subscription lock-in, YOURLS exchanges vendor dependencies for direct control over every redirect.

What it does well

Browser bookmarklets: generate shortened links from any active web page with a single click, removing the need to log into the admin dashboard manually.
Administrative dashboard: search, filter, and edit existing short links or change destination targets without editing database records.
Native click analytics: track click volume, visitor locations, and referral websites through built-in reports that require no tracking cookies.
Custom keyword slugs: assign descriptive, memorable aliases for marketing campaigns and print materials instead of random character strings.
Plugin architecture: add specific capabilities like custom error pages or password-protected redirects through a hook-based extension system.
Developer API: connect content management systems or publishing workflows to shorten links programmatically when publishing new content.

services: yourls: image: yourls:1.10.6-apache restart: always ports: - "8080:8080" environment: YOURLS_DB_HOST: mysql YOURLS_DB_USER: root YOURLS_DB_PASS: ${YOURLS_DB_PASS} YOURLS_DB_NAME: yourls YOURLS_SITE: ${YOURLS_SITE} YOURLS_USER: ${YOURLS_USER} YOURLS_PASS: ${YOURLS_PASS} YOURLS_COOKIEKEY: ${YOURLS_COOKIEKEY} depends_on: mysql: condition: service_healthy healthcheck: test: ["CMD-SHELL", "curl -f -s http://localhost:8080/admin/install.php || exit 1"] interval: 5s timeout: 5s retries: 20 start_period: 10s mysql: image: mariadb:11.4.13 restart: always environment: MARIADB_ROOT_PASSWORD: ${YOURLS_DB_PASS} MARIADB_DATABASE: yourls volumes: - db-data:/var/lib/mysql healthcheck: test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"] interval: 5s timeout: 5s retries: 20 start_period: 10s volumes: db-data:

yourls-1 | 2026-11-02T02:55:55.653767965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /compress.php?file=../../../../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.653785215Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /compress.php?file=../../../../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_10_3 rv:2.0; so-DJ) AppleWebKit/533.15.6 (KHTML, like Gecko) Version/4.0.2 Safari/533.15.6" yourls-1 | 2026-11-02T02:55:55.653917007Z [Mon Nov 02 02:55:55.653898 2026] [autoindex:error] [pid 243:tid 243] [client 192.168.65.30:41250] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive yourls-1 | 2026-11-02T02:55:55.653946965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 403 484 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.654118048Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.cpr/%2Fetc%2Fpasswd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.654149382Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; hu-HU) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" yourls-1 | 2026-11-02T02:55:55.654958132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" yourls-1 | 2026-11-02T02:55:55.655404965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /dana/home/index.cgi HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.655569048Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.2) AppleWebKit/619.14.1 (KHTML, like Gecko) Version/17.7.52 Safari/619.14.1" yourls-1 | 2026-11-02T02:55:55.655683507Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.656558340Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /ui_config.properties HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; es-es) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1" yourls-1 | 2026-11-02T02:55:55.656620465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.vs/slnx.sqlite HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0" yourls-1 | 2026-11-02T02:55:55.657858590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /static/Dockerrun.aws.json HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.657928673Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.658175965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /locales/locale.json?locale=..%2F..%2Fconfig&namespace=app HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.658215132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.659239715Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /authorized_keys HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0" yourls-1 | 2026-11-02T02:55:55.659466423Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-admin/admin-ajax.php?action=fb3d_send_posts HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.660688465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /rest/GetAutologin HTTP/1.1" 302 209 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.660817548Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-admin/admin-ajax.php?action=fb3d_send_posts HTTP/1.1" 302 209 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.660927007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /locales/locale.json?locale=..%2F..%2Fconfig&namespace=app HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:109.0) Gecko/20100101 Firefox/115.0" yourls-1 | 2026-11-02T02:55:55.663100590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.20" yourls-1 | 2026-11-02T02:55:55.664232007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /dolibarr/adherents/cartes/carte.php?mode=cardlogin&foruserlogin=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&model=5160&optioncss=print HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" yourls-1 | 2026-11-02T02:55:55.664734465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /help/top.jsp?langcode=1%22%3E%3Csvg%20onload=alert(document.domain)%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.665228965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "POST /_syslog.txt HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" yourls-1 | 2026-11-02T02:55:55.667093340Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /api/raster/search/?band=1)%20AND%201=CAST((SELECT%20version())%20AS%20INT)-- HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.667799798Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /CMSInstall/install.aspx HTTP/1.1" 302 209 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.667807590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /c6/JHSoft.Web.CustomQuery/UploadFileDownLoadnew.aspx/?FilePath=../Resource/JHFileConfig.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.667984090Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /nagioslogserver/install HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" yourls-1 | 2026-11-02T02:55:55.668047090Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /help/top.jsp?langcode=1%22%3E%3Csvg%20onload=alert(document.domain)%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.668739257Z [Mon Nov 02 02:55:55.668665 2026] [autoindex:error] [pid 238:tid 238] [client 172.18.0.1:52544] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive, referer: http://192.168.65.30:8080/.vs/slnx.sqlite yourls-1 | 2026-11-02T02:55:55.668959132Z www.example.com:80 172.18.0.1 - - [02/Nov/2026:02:55:55 +0000] "GET / HTTP/1.1" 403 477 "http://192.168.65.30:8080/.vs/slnx.sqlite" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0" yourls-1 | 2026-11-02T02:55:55.670185757Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /realms/master/.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0" yourls-1 | 2026-11-02T02:55:55.670376715Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /bin/ssx/Main/WebHome?resource=../../WEB-INF/xwiki.cfg&minify=false HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.670646840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.671551173Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /help/top.jsp?langcode=1%22%3E%3C/script%3E%3Csvg%20onload=alert(document.domain)%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0" yourls-1 | 2026-11-02T02:55:55.671725007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.%00./.%00./etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_1 rv:6.0; vi-VN) AppleWebKit/535.6.1 (KHTML, like Gecko) Version/4.1 Safari/535.6.1" yourls-1 | 2026-11-02T02:55:55.673228882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.authorized_keys HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.673490257Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.673692423Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.675496673Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3" yourls-1 | 2026-11-02T02:55:55.677034590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/6.0" yourls-1 | 2026-11-02T02:55:55.678004132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.%00./.%00./etc/passwd HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.11" yourls-1 | 2026-11-02T02:55:55.678643548Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /api/BetterImageGallery/imagehandler?path=../../../Web.Config HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.678720132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /bin/ssx/Main/WebHome?resource=../../WEB-INF/xwiki.cfg&minify=false HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" yourls-1 | 2026-11-02T02:55:55.679112757Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_simpledownload&task=download&fileid=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.679157673Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /dolibarr/adherents/cartes/carte.php?mode=cardlogin&foruserlogin=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&model=5160&optioncss=print HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/11.0" yourls-1 | 2026-11-02T02:55:55.679218048Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.679272423Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.putty/my.ppk HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.679321590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /scgi-bin/platform.cgi?page=portalLogin.htm&portal=SSLVPN\"><script>alert(document.domain)</script> HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" yourls-1 | 2026-11-02T02:55:55.679355923Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /c6/JHSoft.Web.CustomQuery/UploadFileDownLoadnew.aspx/?FilePath=../Resource/JHFileConfig.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.679439382Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /nagioslogserver/install HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/4.0" yourls-1 | 2026-11-02T02:55:55.679455132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /scgi-bin/platform.cgi?page=portalLogin.htm&portal=SSLVPN\"><script>alert(document.domain)</script> HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.680047090Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_simpledownload&task=download&fileid=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96.0" yourls-1 | 2026-11-02T02:55:55.680051007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5(999999999)+--+@`'` HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 6.1; rv:105.0) Gecko/20100101 Firefox/105.0" yourls-1 | 2026-11-02T02:55:55.680202882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /api/downloads?fileName=../../../../../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.680403340Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?debug_host=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_debug=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.680609298Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10" yourls-1 | 2026-11-02T02:55:55.680694548Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /CMSInstall/install.aspx HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" yourls-1 | 2026-11-02T02:55:55.680831757Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /realms/master/.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.681764673Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5(999999999)+--+@`'` HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0" yourls-1 | 2026-11-02T02:55:55.681922048Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?debug_host=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_debug=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.681969632Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.682455007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.682804090Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" yourls-1 | 2026-11-02T02:55:55.683005965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.684613298Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /api/BetterImageGallery/imagehandler?path=../../../Web.Config HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.684618007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /api/downloads?fileName=../../../../../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.684619298Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 302 209 "-" "Moz111a/5.0 (1Pad; CPU 0S 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.684620840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "POST /_syslog.txt HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.684622007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /help/top.jsp?langcode=1%22%3E%3C/script%3E%3Csvg%20onload=alert(document.domain)%3E HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.685095507Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.authorized_keys HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" yourls-1 | 2026-11-02T02:55:55.688217382Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/Windows/win.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3) AppleWebKit/619.29 (KHTML, like Gecko) Version/17.0.14 Safari/619.29" yourls-1 | 2026-11-02T02:55:55.688232840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /extensions/realestate/index.php/properties/list/list-with-sidebar/realties?option=com_jux_real_estate&view=realties&Itemid=6wdv%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ewz8nu&title&price_slider_lower=63752&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=2&cat_id=8&country_id=73&locstate=187&beds=1&agent_id=112&baths=1&jp_yearbuilt&button=Search HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" yourls-1 | 2026-11-02T02:55:55.688354382Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.1" yourls-1 | 2026-11-02T02:55:55.688492757Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /auth/realms/master/.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.688618882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.689328882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /extensions/realestate/index.php/properties/list/list-with-sidebar/realties?option=com_jux_real_estate&view=realties&Itemid=6wdv%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ewz8nu&title&price_slider_lower=63752&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=2&cat_id=8&country_id=73&locstate=187&beds=1&agent_id=112&baths=1&jp_yearbuilt&button=Search HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 6.1; rv:109.0) Gecko/20100101 Firefox/115.0" yourls-1 | 2026-11-02T02:55:55.690228840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /auth/login?to=/92874%27;alert(document.domain)//280 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.690548590Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /home HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.691012798Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0" yourls-1 | 2026-11-02T02:55:55.693628215Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.694344548Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:55.694587423Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /?s=%22%3E%3Cscript%3Ealert(`document.domain`)%3C/script%3E HTTP/1.1" 403 484 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.5" yourls-1 | 2026-11-02T02:55:55.694591257Z [Mon Nov 02 02:55:55.694540 2026] [autoindex:error] [pid 228:tid 228] [client 192.168.65.30:42270] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive yourls-1 | 2026-11-02T02:55:55.696739507Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.17" yourls-1 | 2026-11-02T02:55:55.698407173Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /auth/login?to=/92874%27;alert(document.domain)//280 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.698764965Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.698959840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /node_modules/mqtt/test/helpers/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.8" yourls-1 | 2026-11-02T02:55:55.699095840Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.4.21" yourls-1 | 2026-11-02T02:55:55.699098215Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /install/froxlor.sql HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.699216715Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /php/device_graph_page.php?graph=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/15.0" yourls-1 | 2026-11-02T02:55:55.699245465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /install/froxlor.sql HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:78.0) Gecko/20100101 Firefox/78.0" yourls-1 | 2026-11-02T02:55:55.699286882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /.putty/putty.ppk HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14" yourls-1 | 2026-11-02T02:55:55.699324298Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /index.php?option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.6" yourls-1 | 2026-11-02T02:55:55.699346548Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /auth/realms/master/.well-known/openid-configuration HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.699403715Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/Windows/win.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" yourls-1 | 2026-11-02T02:55:55.699639882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /common/download/resource?resource=/profile/../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.699732382Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.699764340Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /node_modules/mqtt/test/helpers/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:55.699765923Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /home HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:55.699829048Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /php/device_graph_page.php?graph=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8" yourls-1 | 2026-11-02T02:55:55.699985715Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /common/download/resource?resource=/profile/../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/7.0" yourls-1 | 2026-11-02T02:55:55.699987798Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:55 +0000] "GET /adama/adama/downloadService?type=1&file=../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7" yourls-1 | 2026-11-02T02:55:55.853700257Z www.example.com:80 127.0.0.1 - - [02/Nov/2026:02:55:55 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)" yourls-1 | 2026-11-02T02:55:56.602290174Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /xwiki/bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:56.602321882Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /?s=%22%3E%3Cscript%3Ealert(`document.domain`)%3C/script%3E HTTP/1.1" 403 484 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1" yourls-1 | 2026-11-02T02:55:56.602409632Z [Mon Nov 02 02:55:56.601406 2026] [autoindex:error] [pid 265:tid 265] [client 192.168.65.30:42014] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive yourls-1 | 2026-11-02T02:55:56.604769465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /xwiki/bin/create/Main/%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.8" yourls-1 | 2026-11-02T02:55:56.610939090Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:56.611627465Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /.putty/192.168.65.30:8080.ppk HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:56.612341215Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /common/download/resource?resource=/profile/../../../../Windows/win.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/604.1" yourls-1 | 2026-11-02T02:55:56.613130007Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /extensions/realestate/index.php/properties/list/list-with-sidebar/realties?option=com_jux_real_estate&view=realties&Itemid=148&title&price_slider_lower=63752&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=2&cat_id=8&country_id=73&locstate=187&beds=1&agent_id=112&baths=1&jp_yearbuilt=mzbpj%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3eflmo8&button=Search HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:56.613140549Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /extensions/realestate/index.php/properties/list/list-with-sidebar/realties?option=com_jux_real_estate&view=realties&Itemid=148&title&price_slider_lower=63752&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=2&cat_id=8&country_id=73&locstate=187&beds=1&agent_id=112&baths=1&jp_yearbuilt=mzbpj%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3eflmo8&button=Search HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8.1 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:56.613144132Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:56.613763549Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /adama/adama/downloadService?type=1&file=../../../../etc/passwd HTTP/1.1" 302 209 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" yourls-1 | 2026-11-02T02:55:56.613940632Z www.example.com:80 192.168.65.30 - - [02/Nov/2026:02:55:56 +0000] "GET /common/download/resource?resource=/profile/../../../../Windows/win.ini HTTP/1.1" 302 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" yourls-1 | 2026-11-02T02:55:56.854826216Z www.example.com:80 127.0.0.1 - - [02/Nov/2026:02:55:56 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)" yourls-1 | 2026-11-02T02:55:57.861866258Z www.example.com:80 127.0.0.1 - - [02/Nov/2026:02:55:57 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)" yourls-1 | 2026-11-02T02:55:58.861995050Z www.example.com:80 127.0.0.1 - - [02/Nov/2026:02:55:58 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.69 (Debian) PHP/8.5.12 (internal dummy connection)"

YOURLS

Overview

Why YOURLS instead of TinyURL

What it does well

Similar Open Source Tools

Dub.co

Limitations

Who should use it

FAQ

Verdict

Self-host YOURLS with Docker

Download the compose file

Create .env with fresh secrets

Start it

First run

Project README

GitHub Repository Metrics

Supported Platforms

Mentoring for backend developers. Consulting for startups.

Maintainer? Add the badge

Kutt

Sink