anti/DECNET
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: add .env based configuration for API, Web, and Auth options

Browse Source
This commit is contained in:
anti
2026-04-08 01:24:49 -04:00
parent 31e0c5151b
commit 32b06afef6
76 changed files with 600 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.env.example Normal file
View File

@@ -0,0 +1,11 @@
# API Options
DECNET_API_HOST=0.0.0.0
DECNET_API_PORT=8000
DECNET_JWT_SECRET=supersecretkey12345
DECNET_INGEST_LOG_FILE=/var/log/decnet/decnet.log
# Web Dashboard Options
DECNET_WEB_HOST=0.0.0.0
DECNET_WEB_PORT=8080
DECNET_ADMIN_USER=admin
DECNET_ADMIN_PASSWORD=admin

2
.gitignore vendored
View File

@@ -17,3 +17,5 @@ webmail
windows1 windows1
*.db *.db
decnet.json decnet.json
.env
.env.local

4
.hypothesis/constants/12924abcbf0c075f Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'username', 'uuid']

4
.hypothesis/constants/3048c6da87ba838d Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/auth.py
# hypothesis_version: 6.151.11
[1440, 'HS256', 'exp', 'iat', 'utf-8']

4
.hypothesis/constants/39f59c66c174e4ce Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

4
.hypothesis/constants/42a1dcb5c22b1ac1 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/ini_loader.py
# hypothesis_version: 6.151.11
[100, 512, 1024, ',', '.', '1', '[', ']', 'amount', 'archetype', 'binary', 'custom-', 'exceeds maximum', 'exec', 'general', 'gw', 'interface', 'ip', 'log-target', 'log_target', 'mutate-interval', 'mutate_interval', 'net', 'nmap-os', 'nmap_os', 'ports', 'services']

4
.hypothesis/constants/46cebe14ff55dbd1 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[5173, 8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

4
.hypothesis/constants/4efedb0b38145ee9 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/env.py
# hypothesis_version: 6.151.11
['.env', '.env.local', '0.0.0.0', '8000', '8080', 'DECNET_ADMIN_USER', 'DECNET_API_HOST', 'DECNET_API_PORT', 'DECNET_JWT_SECRET', 'DECNET_WEB_HOST', 'DECNET_WEB_PORT', 'admin']

4
.hypothesis/constants/56584ef41d5dcfbb Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/auth.py
# hypothesis_version: 6.151.11
[1440, 'HS256', 'exp', 'iat', 'utf-8']

4
.hypothesis/constants/653cbfe0ead00867 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'username', 'uuid']

4
.hypothesis/constants/6ef9c847efdbbda6 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

4
.hypothesis/constants/7a3f92bbfaebef4e Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/ini_loader.py
# hypothesis_version: 6.151.11
[',', '.', '1', 'amount', 'archetype', 'binary', 'custom-', 'exec', 'general', 'gw', 'interface', 'ip', 'log-target', 'log_target', 'mutate-interval', 'mutate_interval', 'net', 'nmap-os', 'nmap_os', 'ports', 'services']

4
.hypothesis/constants/84bbb6b2519f3506 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

4
.hypothesis/constants/bae355075973c2af Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

4
.hypothesis/constants/cbd8a83626f88ea8 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/sqlite_repository.py
# hypothesis_version: 6.151.11
['SELECT * FROM logs', 'active_deckies', 'attacker_ip', 'decky', 'decnet.db', 'deployed_deckies', 'event_type', 'fields', 'max_id', 'msg', 'must_change_password', 'password_hash', 'raw_line', 'role', 'service', 'timestamp', 'total', 'total_logs', 'unique_attackers', 'username', 'uuid']

4
.hypothesis/constants/dbb3e0fb1231c2a3 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

4
.hypothesis/constants/e6075ef770e33fe2 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

4
.hypothesis/constants/e9250999acae5d85 Normal file
View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[5173, 8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

1
.hypothesis/examples/ecc7e8764d8d8b88/0575996a80e05285
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙没锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/05b107d6a0bba012
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙喹狇妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/0846c0a67e2fa342
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𥕻񏭔򣬝򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/15e20de56fba3fec
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙么每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/1997fccd48132354
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/19f423ffce230999
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙貌煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/19f62e888bc7d450
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/1d44b73102dd8c98
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聮聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/2a7437fadafc45ce
View File

@@ -1 +0,0 @@
烮000000000i聝聫聭聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/36ed65683e3a3efd
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𒆌򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/37f8a6c9a01c54f1
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𒆄򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/39da675e7d50741a
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙啜瘩妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/3b04ee6988d4b46f
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𑲎򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/3b1a7cdbf68230dc
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙冒煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/431ed9f80364a313
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙陆脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/48f15e048f30c735
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聶颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/510d2cf15e561bac
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙脮脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/5854c771f9166bfa
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/59485746ee4866ef
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐙿󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/6175cae069b6b104
View File

@@ -1 +0,0 @@
烮0000000000聙聙聛聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/651a4843d51dcfa1
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀞򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/77d767d4803a5a08
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙酄€饞到駨瓟颍瑵颛尘髝憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/8f0ddcfa634ad488
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐀉<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/8fbf43963f34dcb1
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙梅锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/94ea48606f394621
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙酄€饜€<EFBFBD>彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/aac4432fea72bbeb
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐑇<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/af08050831086ce7
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙霉镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/b53b2ea17bf8e9e7
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ񊋷񏭔򣬝򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/bba3269ddda3d3cb
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐀅<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/bce5c48547379b69
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙庐每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/becbc776c3f638e6
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙炉锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/c04299f7af42a0e4
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐏕򣬝򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/c0bc38404d4ce421
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聠玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/c218906a54bba0d1
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聜玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/c417736446764939
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙脳盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/d06efb89f32aacbb
View File

@@ -1 +0,0 @@
烮0000000000聙聛聭聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/d47f5466101799ef
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𒸝񏭔򣬝򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/d80586ecdeb84e25
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙卤脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/de7c1669ce5d6c22
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/e05a764e49ba2780
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𓵿󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/e2fdf4a908828683
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𒹿󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/f03c12d6c855da70
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聜媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/f735ef6a9da615b7
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘，濖С倔€憢€

1
.hypothesis/examples/ecc7e8764d8d8b88/fab69520c19dbec6
View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𒹭񏭔򣬝򧳾󀑋<EFBFBD>

1
.hypothesis/examples/ecc7e8764d8d8b88/fd5f59ae70b5c817
View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙媒锘<EFBFBD>妺否彮旘，濖С倔€憢€

BIN
.hypothesis/unicode_data/16.0.0/codec-utf-8.json.gz
View File

Binary file not shown.

BIN
.test-deck.ini.swp
View File

Binary file not shown.

24
README.md
View File

@@ -490,6 +490,30 @@ See [`test-full.ini`](test-full.ini) — covers all 25 services across 10 role-t
--- ---
## Environment Configuration (.env)
DECNET supports loading configuration from `.env.local` and `.env` files located in the project root. This is useful for securing secrets like the JWT key and configuring default ports without passing flags every time.
An example `.env.example` is provided:
```ini
# API Options
DECNET_API_HOST=0.0.0.0
DECNET_API_PORT=8000
DECNET_JWT_SECRET=supersecretkey12345
DECNET_INGEST_LOG_FILE=/var/log/decnet/decnet.log
# Web Dashboard Options
DECNET_WEB_HOST=0.0.0.0
DECNET_WEB_PORT=8080
DECNET_ADMIN_USER=admin
DECNET_ADMIN_PASSWORD=admin
```
Copy `.env.example` to `.env.local` and modify it to suit your environment.
---
## Logging ## Logging
All attacker interactions are forwarded off the decoy network to an isolated logging sink. The log pipeline lives on a separate internal Docker bridge (`decnet_logs`) that is not reachable from the fake LAN. All attacker interactions are forwarded off the decoy network to an isolated logging sink. The log pipeline lives on a separate internal Docker bridge (`decnet_logs`) that is not reachable from the fake LAN.

BIN
decnet.db
View File

Binary file not shown.

443
decnet.log
View File

@@ -361,3 +361,446 @@
<134>1 2026-04-08T03:05:15.848801+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50550"] <134>1 2026-04-08T03:05:15.848801+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50550"]
<134>1 2026-04-08T03:05:15.848882+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>뎱sr<73>` <>B @<40>&<26><>cG|$G<>͒ <134>1 2026-04-08T03:05:15.848882+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>뎱sr<73>` <>B @<40>&<26><>cG|$G<>͒
<EFBFBD>/<2F>"] <EFBFBD>/<2F>"]
<134>1 2026-04-08T03:05:15.848949+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T03:05:15.849007+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T03:05:15.849061+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T03:21:44.871598+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T03:21:44.905490+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T03:21:44.944053+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T03:21:45.112633+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T03:29:47.393300+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T03:29:47.490394+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T03:29:47.642795+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T03:29:47.694889+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.195876+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.250767+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.349723+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T04:18:50.507767+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T04:19:42.933390+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail
<134>1 2026-04-08T04:19:43.015625+00:00 decky-webmail rdp - startup - RDP server starting as decky-webmail on port 3389
<134>1 2026-04-08T04:21:14.872728+00:00 decky-webmail vnc - startup - VNC server starting as decky-webmail
<134>1 2026-04-08T04:21:14.922524+00:00 decky-webmail mysql - startup - MySQL server starting as decky-webmail
<134>1 2026-04-08T04:21:30.999239+00:00 decky-webmail tftp - startup - TFTP server starting as decky-webmail
<134>1 2026-04-08T04:21:31.045857+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.249873+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.429939+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T04:31:57.529212+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.630505+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:32:28.201534+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46314"]
<134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="58706"]
<134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="52752"]
<134>1 2026-04-08T04:32:28.204354+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]
<134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:34.208779+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:34.208799+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:39.213936+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:39.214047+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:39.214360+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49084"]
<134>1 2026-04-08T04:32:39.214382+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46786"]
<134>1 2026-04-08T04:32:39.214547+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]
<134>1 2026-04-08T04:32:39.214632+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.500361+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49086"]
<134>1 2026-04-08T04:32:45.502004+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39446"]
<134>1 2026-04-08T04:32:45.502741+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49096"]
<134>1 2026-04-08T04:32:45.502819+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46800"]
<134>1 2026-04-08T04:32:45.503064+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49100"]
<134>1 2026-04-08T04:32:45.505187+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39462"]
<134>1 2026-04-08T04:32:45.506648+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.506887+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.507420+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.509431+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.509415+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.509673+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.509692+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.507695+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508029+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508606+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '88', 'Connection': 'close', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"]
<134>1 2026-04-08T04:32:45.507559+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:45.508180+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.507206+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.507859+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Content-Length': '441', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]
<134>1 2026-04-08T04:32:45.508429+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.512673+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512833+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="AUTH NTLM"]
<134>1 2026-04-08T04:32:45.512718+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512839+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HELP"]
<134>1 2026-04-08T04:32:45.512946+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512953+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'Connection': 'close', 'Depth': '1', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.513069+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39468"]
<134>1 2026-04-08T04:32:45.513162+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.513355+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'GET', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.513603+00:00 decky-webmail http - request [decnet@55555 method="AOGT" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.514852+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
<134>1 2026-04-08T04:32:45.514886+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.515015+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.514996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.516930+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39484"]
<134>1 2026-04-08T04:32:45.517101+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.517216+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.517249+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'POST', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.517429+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.517595+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.518030+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.518736+00:00 decky-webmail smtp - auth_attempt [decnet@55555 src="192.168.1.5" command="AUTH NTLM"]
<134>1 2026-04-08T04:32:45.518832+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.518681+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.518908+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.518882+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.522434+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46808"]
<134>1 2026-04-08T04:32:45.522593+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.523103+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46824"]
<134>1 2026-04-08T04:32:45.523193+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.526709+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="000b AUTHENTICATE NTLM"]
<134>1 2026-04-08T04:32:45.526838+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.527952+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
<134>1 2026-04-08T04:32:45.528983+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.529094+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.529093+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.532765+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.544239+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39490"]
<134>1 2026-04-08T04:32:45.544576+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.544692+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:45.545200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:32:45.545544+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.545703+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39494"]
<134>1 2026-04-08T04:32:45.545844+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39496"]
<134>1 2026-04-08T04:32:45.545941+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546026+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546115+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49108"]
<134>1 2026-04-08T04:32:45.546344+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.546453+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546550+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49124"]
<134>1 2026-04-08T04:32:45.546634+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="($m|0<>Z<EFBFBD>bR<62> <0C><>"]
<134>1 2026-04-08T04:32:45.546720+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="T<>"]
<134>1 2026-04-08T04:32:45.546774+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>l<EFBFBD>S<EFBFBD><12>Z}:<3A><16> y<><79>^ <0B><><EFBFBD>ҡ<EFBFBD>b
k}c<><63>t+m)G_<47>s<EFBFBD>1;<3B>>r395/<2F>,<2C>0<00>̨̩̪<CCA8><CCAA><EFBFBD><EFBFBD><EFBFBD>\]<5D>a<EFBFBD>S<EFBFBD>+<2B>/<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>\\<5C>`<60>R<EFBFBD>$<24>(k<>s<EFBFBD>w<00><>#<23>'g<>r<EFBFBD>v<00><>"]
<134>1 2026-04-08T04:32:45.546841+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22><00><> <09>E<00><><EFBFBD><EFBFBD>Q<00><><EFBFBD><EFBFBD>P=<00><<00><00>Ai<> "]
<134>1 2026-04-08T04:32:45.546902+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<11><11><11>#
(&    "]
<134>1 2026-04-08T04:32:45.546959+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=" +-3<04><04><11><04>L<EFBFBD>{<1B><><EFBFBD><EFBFBD>N<1D>'PȞ[<5B>`<1B><>c8G<x-<10>K<EFBFBD><4B><EFBFBD><EFBFBD><EFBFBD>tDa ۘ`TF<54>'<27>%TK<54><4B>Fu<46>\\<5C><>t<EFBFBD>6><3E>P%<25><><EFBFBD>ն<14><>x<EFBFBD><78><EFBFBD><EFBFBD><EFBFBD><1D>P|<7C><>j7"]
<134>1 2026-04-08T04:32:45.547020+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>7<EFBFBD>*<2A>x<>Nw ZŽUk2o<><6F>!X<><58>ԫ<EFBFBD>l<1A>#_<17>
<EFBFBD>0<>BR<42><52><EFBFBD>\]q<><71><EFBFBD>y<EFBFBD><79><EFBFBD>7<>W=^E<>􈠌uk<75><6B>%sZ<73><5A>S<EFBFBD>0<EFBFBD><$+_<>D<EFBFBD><44>(<28>ۼ<EFBFBD>\\<5C><><EFBFBD>ѕ<><D195>wI<77>񡟐;(>A<><41><EFBFBD><EFBFBD>ؼu<D8BC><75> <0B>{<7B>|<7C><>j["]
<134>1 2026-04-08T04:32:45.547092+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/z<><7A><EFBFBD>T<><54>YvNOb3GAD<41>@Yb<59>::<06>m<EFBFBD><6D>ep;'W-S֭K<D6AD>T<EFBFBD>|30L.<2E><>/1<18>d<EFBFBD>l/<2F><>&<26>!<21> Чa<D0A7>I}ns<6E><73>Y<EFBFBD><59>K<>x(kc<6B><63>w<EFBFBD>?'3<11>tT<74>ق<EFBFBD><D982>1慼i<E685BC><69><15><>y<7F><79><EFBFBD><EFBFBD><EFBFBD><EFBFBD><18>K_"]
<134>1 2026-04-08T04:32:45.547159+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>EPc<50>@<40><><EFBFBD>\]<5D>a<>t_ȉ<5F><C889><01><>C $8:<3A><><EFBFBD>^<5E><gf<67><66>1<15>)_3$}<7D><>e<EFBFBD><65>Pi}1<><14>Pl\]<5D><><EFBFBD><EFBFBD><EFBFBD>{w<>?<1B>-<2D><04>_F<5F><46>+<2B>jo<6A>y~%V<><56> <09>K<EFBFBD>,<2C>J^<5E>~<7E><><EFBFBD><12>,<2C><><EFBFBD><EFBFBD>66<1B>dQ<1F>"]
<134>1 2026-04-08T04:32:45.547212+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD><1A>9[<5B> <0C><>_@<40><><EFBFBD>Yªa3@ Q<>.u<>X<EFBFBD>Vǰ<1C>K{<7B>1<EFBFBD>.<2E>*0<>T<>Ɂ"]
<134>1 2026-04-08T04:32:45.547302+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49140"]
<134>1 2026-04-08T04:32:45.547392+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>m<EFBFBD> <0B><><EFBFBD>=2K<32>:<3A><>(<28>)I <>Ih<49><04>g<EFBFBD>H"]
<134>1 2026-04-08T04:32:45.547469+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T04:32:45.547551+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.547566+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46836"]
<134>1 2026-04-08T04:32:45.547629+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.547859+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46848"]
<134>1 2026-04-08T04:32:45.547969+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="($#<23><><EFBFBD><EFBFBD><EFBFBD> <0C><1B><>#\"<22>, <0C><>m<EFBFBD><6D><EFBFBD><EFBFBD>sd<00><>o1<6F> k<04>rA<>1<0E>Z<EFBFBD>1Ka$<24>9{<7B>I<EFBFBD>E<01><><EFBFBD>G<EFBFBD>r395/<2F>,<2C>0<00>̨̩̪<CCA8><CCAA><EFBFBD><EFBFBD><EFBFBD>\]<5D>a<EFBFBD>S<EFBFBD>+<2B>/<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>\\<5C>`<60>R"]
<134>1 2026-04-08T04:32:45.548059+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><00><> <09>E<00><><EFBFBD><EFBFBD>Q<00><><EFBFBD><EFBFBD>P=<00><<00><00>Ai<> "]
<134>1 2026-04-08T04:32:45.548124+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<11><11><11>#
(&    "]
<134>1 2026-04-08T04:32:45.548183+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd=" +-3<04><04><11><04><>OY7)1Yy<59>7tko){<1E>\"\]<5D><><EFBFBD><08>Eq<>u<EFBFBD>:rt<><07><><EFBFBD>"]
<134>1 2026-04-08T04:32:45.548238+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<02><>m<>Q؄#%<25>"]
<134>1 2026-04-08T04:32:45.548286+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="K<><4B> <0C>s@)Q;К-<2D>e0Ȼ<30>2<EFBFBD><1D>F3<46><33>4<EFBFBD>5<EFBFBD>Z͵<5A>#<23>6<>2<EFBFBD>F6<46>\\K<><4B>8D<38>zkЯ{hm<68><6D>i,<2C>uLH9r<39>Q<><51><EFBFBD>ꦧ&:fo<66><6F><EFBFBD><03>q<EFBFBD>U_=T<>kgF<12><04>B<EFBFBD><18><><EFBFBD>xś<78>|<7C>H<EFBFBD><48><EFBFBD>
<EFBFBD>1<EFBFBD>WvC<76><43>"]
<134>1 2026-04-08T04:32:45.548341+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD>Z<EFBFBD><5A>+<01>e<EFBFBD><65>.<2E><>$)&KC<4B><43><EFBFBD>֤<>?<3F>j#k<>@raE<61>$F<08><><1B>Ҟ<EFBFBD>7<EFBFBD><37><EFBFBD><EFBFBD><05><>feڨNY<4E><02>7 "]
<134>1 2026-04-08T04:32:45.548392+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<06>Ǭ:hvL<76>9<EFBFBD>'/<2F>x<1D><><EFBFBD><EFBFBD>e0<65>'<07><><EFBFBD><EFBFBD>EPγ<50>v<EFBFBD><76>DP\\<5C><>~|t_<74><17>S8+,gu؏2c;f֮<66><D6AE>N0 <0C><><EFBFBD>=<3D>Q<EFBFBD>U{<7B><>"]
<134>1 2026-04-08T04:32:45.548445+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD>y<>u<11>aάj<CEAC>O<EFBFBD><4F><EFBFBD>kid@6h$4<>¤V<C2A4>[<5B><>j*<2A>~̸<>IZik<69>ͺ<EFBFBD>yzZ<7A>[<5B><><EFBFBD>i<EFBFBD><69><EFBFBD><EFBFBD><EFBFBD><EFBFBD>~ڨ<>\"c<08><>&<26><><EFBFBD>x7j<37>c}w<10>D<EFBFBD><44>yB<>W<19><><EFBFBD><EFBFBD>:<3A><><1B><>gVuE<75><45>#<23><>?<3F>Q}u_CLs[!<21>x`~"]
<134>1 2026-04-08T04:32:45.548504+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd=",eѾ<65><D1BE>><<1B><>@8<>b<EFBFBD>H<7F>*<2A>Q<EFBFBD><51>d"]
<134>1 2026-04-08T04:32:45.548555+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/<17><17><>|/4Ox+<2B>R\"$&|<7C>|<7C>G<EFBFBD>tF&<26>:oj<6F>:8<>z6;<1C>&<26><>F4<>aVh<56>:<3A>(E(:<3A>\\<5C><><EFBFBD>i<EFBFBD>A ϕ<>[<5B><07><>p9<70><39>DP<44><50>X<EFBFBD>VyWs<57>8<EFBFBD>kJp<4A>iv<><12>™<EFBFBD>tBU<00>eL<65><05>Ҽ<EFBFBD>{<7B><1C><>w<EFBFBD>N"]
<134>1 2026-04-08T04:32:45.548609+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22>L.dw<64><77><EFBFBD><16>[\]8<>̀<EFBFBD>鐐A<E99090>/d<>y<EFBFBD><79><EFBFBD>U(9<><13><><EFBFBD><EFBFBD><EFBFBD>q<EFBFBD>RpB%,R<52><16>u<EFBFBD>j<EFBFBD>[<5B>#<>_k<5F>>:4-5<>͓r<02><> <20>t_<00>kGџ<47>ï<EFBFBD>P<4<>fC<66><43><EFBFBD><02><><11>bQ<62><51><17> .â<>e<EFBFBD>ly|{R<>wD<77><44><EFBFBD>Z"]
<134>1 2026-04-08T04:32:45.548715+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46850"]
<134>1 2026-04-08T04:32:45.548803+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>mD:=<3D>!b -h<><68>FC8b<16><>%Tn$<12><>"]
<134>1 2026-04-08T04:32:45.548870+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T04:32:45.548935+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.548996+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.549037+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.641769+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46430"]
<134>1 2026-04-08T04:34:27.641695+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49146"]
<134>1 2026-04-08T04:34:27.641860+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53734"]
<134>1 2026-04-08T04:34:27.642208+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.963390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:27.963544+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:27.963788+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.013757+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.113178+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.162993+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:28.163187+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Command': 'stop-debug', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.163350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.212662+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.262348+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.311917+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/gxwjhapmmlcwofnrduso.htm" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.361795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53744"]
<134>1 2026-04-08T04:34:28.411218+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="ieU<1C><>random1random2random3random4 /"]
<134>1 2026-04-08T04:34:28.510359+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.510795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53758"]
<134>1 2026-04-08T04:34:28.560327+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:28.560615+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Host: 192.168.1.110:143"]
<134>1 2026-04-08T04:34:28.560715+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:28.560793+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:28.560853+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Connection: close"]
<134>1 2026-04-08T04:34:28.560911+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:28.560972+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:28.561026+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept: */*"]
<134>1 2026-04-08T04:34:28.561070+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:28.610137+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '279'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]
<134>1 2026-04-08T04:34:28.659214+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.659222+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46446"]
<134>1 2026-04-08T04:34:28.659488+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/kgapwlzcogfuecel" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.809342+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.809735+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46460"]
<134>1 2026-04-08T04:34:28.859483+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:28.859681+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:28.859757+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:28.859813+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:28.859866+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:28.859911+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:28.859956+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:28.859999+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:28.860044+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:28.860089+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:28.958529+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.009095+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41536"]
<134>1 2026-04-08T04:34:29.009535+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '52', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]
<134>1 2026-04-08T04:34:29.058524+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:29.058802+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:29.058891+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:29.058945+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:29.058861+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:34:29.058997+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:29.059047+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:29.059098+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:29.059145+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:29.059189+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:29.059230+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:29.158241+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.158477+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'keep-alive'}" body=""]
<134>1 2026-04-08T04:34:29.207908+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41550"]
<134>1 2026-04-08T04:34:29.208080+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '86'}" body="<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<probe type=\"string\"><![CDATA[
nmap
\]\]></probe>"]
<134>1 2026-04-08T04:34:29.257438+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:29.257751+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:29.257694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.257884+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:29.257974+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:29.258032+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:29.258080+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:29.258129+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:29.258174+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:29.258223+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:29.258272+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:29.307234+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.356827+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.407235+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622867" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.456694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.506114+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/_vti_inf.html" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.555725+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Depth': '0', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.605201+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.654617+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/wp-login.php" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.704717+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '515'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27cuxofalugy%27%2C%27%24P%24Djsjxyosd6B5frRclNct4qeaZULzkB0%27%2C%27qwotrmiw%40ntqtr.ccl%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27cuxofalugy%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=gaoqzhwizf&name[0\]=gyuzblwqen&pass=dmjqfajxdl&form_id=user_login&op=Log"]
<134>1 2026-04-08T04:34:29.810112+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/jjmxzlevuebb" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '100'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]
<134>1 2026-04-08T04:34:38.361667+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:48.534689+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:58.706568+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:08.879384+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:19.053295+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:29.235485+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:39.415532+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:49.592599+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:59.756064+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:09.927932+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:20.103389+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:30.278231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:40.452159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:50.627441+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:00.805486+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:10.985663+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:21.164276+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:31.343959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:41.513620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:51.686550+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:01.867615+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:14.339487+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.339642+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.339868+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.388633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.538152+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:14.538437+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '279', 'Content-Type': 'application/xml', 'Connection': 'close'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]
<134>1 2026-04-08T04:38:14.538620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.587535+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/cmdownloads/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.636783+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.686632+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.735926+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/axis2/services/listServices" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.785827+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775623094" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.835450+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.885099+00:00 decky-webmail http - request [decnet@55555 method="PING" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.934607+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.984097+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/tyheprdaujfbthwwjkhn.htm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.034696+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/customtags/l10n.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.084303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/otjvfpzykizeggiw" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.134866+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': \"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'\].addHeader('X-Check-Struts', 'ymxswcup')}.multipart/form-data\", 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.184223+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.233940+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.283612+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '515', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27krlubtiqnr%27%2C%27%24P%24DwexvruonI3jQ27oea2L2i95hW0HzI1%27%2C%27xidhzpcb%40ikrvb.coi%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27krlubtiqnr%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=ofaiwvjtag&name[0\]=osbcgzljhk&pass=zjmhuddvgs&form_id=user_login&op=Log"]
<134>1 2026-04-08T04:38:15.333141+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.382571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/xmldata" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.432225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/administrator/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.482610+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php/wp-json/wp/v2/posts/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.532159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/sdk/../../../../../..//etc/vmware/hostd/vmInventory.xml" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.780925+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/euyecualobsc" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '100', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]
<134>1 2026-04-08T04:38:15.830510+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '86', 'Connection': 'close'}" body="<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<probe type=\"string\"><![CDATA[
nmap
\]\]></probe>"]
<134>1 2026-04-08T04:38:15.879684+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.929120+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/administrator/enter.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.979007+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Access-Control-Request-Method': 'HEAD', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Origin': 'example.com', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:38:16.029351+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.078947+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '52', 'Host': '192.168.1.110'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]
<134>1 2026-04-08T04:38:16.128331+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Command': 'stop-debug', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.177872+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.227447+00:00 decky-webmail http - request [decnet@55555 method="TRACE" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.276816+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Max-Forwards': '0'}" body=""]
<134>1 2026-04-08T04:38:16.326576+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/a" remote_addr="192.168.1.5" headers="{'Connection': 'keep-alive', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.378919+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.433168+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Depth': '0'}" body=""]
<134>1 2026-04-08T04:38:24.387985+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/b" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.537358+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/c" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.686938+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/d" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.736611+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:24.836500+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/e" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.985945+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/f" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.136259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/g" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.285927+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/h" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.435837+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/i" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.584954+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/j" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.734226+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/k" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.883337+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/l" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.033552+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/m" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.182666+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/n" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.332053+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/o" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.481239+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/p" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.630630+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/q" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.779996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/r" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.929147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/s" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.079388+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/t" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.228602+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/u" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.377920+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/v" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.527231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/w" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.676350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/x" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.826671+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/y" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.975852+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/z" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.126269+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/." remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.275457+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/-" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.424618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/1" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.573959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/2" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.723224+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/3" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.873171+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/4" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.023279+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/5" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.172406+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/6" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.321598+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/7" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.471054+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/8" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.620504+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/9" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.769853+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/+" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:34.931252+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:45.098128+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:55.266996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:05.431784+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:15.596497+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:25.760275+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:35.925315+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:46.095686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:56.264640+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:06.430236+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:16.602221+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:26.773947+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:36.941690+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:47.110840+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:57.275605+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:07.440749+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:17.614316+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:27.787076+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:37.947686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:48.113508+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:58.276967+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:08.442086+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:18.609988+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:28.784215+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:38.953393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:49.118081+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:59.284941+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:09.458144+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:19.623019+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:29.788571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:39.957390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:50.123200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:00.291225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:10.463393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:20.627191+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:30.797913+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:40.964645+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:51.131638+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:01.290259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:11.447792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:21.603772+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:31.760471+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:41.920287+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:52.083705+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:02.251677+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:12.415397+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:22.579023+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:32.744813+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:42.906618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:53.074407+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:03.243877+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:13.416633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:23.586261+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:33.758032+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:43.935127+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:54.114409+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:04.292362+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:14.468195+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:24.638184+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:34.810944+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:44.986731+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:55.164385+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:05.341147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:15.516077+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:25.688891+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:35.856472+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:46.027314+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:56.195150+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:06.362914+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:16.530644+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:26.700683+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:36.869328+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:47.038170+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:57.203937+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:07.371622+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:17.539364+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:27.709347+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:37.876021+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:48.044892+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:58.214636+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:08.383473+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:18.550282+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:28.718453+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:38.888161+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:49.057016+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:59.230344+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:09.407310+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:19.581342+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:29.756369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:39.932213+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:50.110057+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:00.288805+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:10.464688+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:20.640778+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:30.815601+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:40.990369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:51.164124+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:55:01.338304+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:55:11.513185+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

24
decnet/cli.py
View File

@@ -15,6 +15,13 @@ import typer
from rich.console import Console from rich.console import Console
from rich.table import Table from rich.table import Table
from decnet.env import (
DECNET_API_HOST,
DECNET_API_PORT,
DECNET_INGEST_LOG_FILE,
DECNET_WEB_HOST,
DECNET_WEB_PORT,
)
from decnet.archetypes import Archetype, all_archetypes, get_archetype from decnet.archetypes import Archetype, all_archetypes, get_archetype
from decnet.config import ( from decnet.config import (
DeckyConfig, DeckyConfig,
@@ -199,22 +206,24 @@ def _build_deckies_from_ini(
return deckies return deckies
@app.command() @app.command()
def api( def api(
port: int = typer.Option(8000, "--port", help="Port for the backend API"), port: int = typer.Option(DECNET_API_PORT, "--port", help="Port for the backend API"),
log_file: str = typer.Option("/var/log/decnet/decnet.log", "--log-file", help="Path to the DECNET log file to monitor"), host: str = typer.Option(DECNET_API_HOST, "--host", help="Host IP for the backend API"),
log_file: str = typer.Option(DECNET_INGEST_LOG_FILE, "--log-file", help="Path to the DECNET log file to monitor"),
) -> None: ) -> None:
"""Run the DECNET API and Web Dashboard in standalone mode.""" """Run the DECNET API and Web Dashboard in standalone mode."""
import subprocess import subprocess
import sys import sys
import os import os
console.print(f"[green]Starting DECNET API on port {port}...[/]") console.print(f"[green]Starting DECNET API on {host}:{port}...[/]")
_env: dict[str, str] = os.environ.copy() _env: dict[str, str] = os.environ.copy()
_env["DECNET_INGEST_LOG_FILE"] = str(log_file) _env["DECNET_INGEST_LOG_FILE"] = str(log_file)
try: try:
subprocess.run( subprocess.run(
[sys.executable, "-m", "uvicorn", "decnet.web.api:app", "--host", "0.0.0.0", "--port", str(port)], [sys.executable, "-m", "uvicorn", "decnet.web.api:app", "--host", host, "--port", str(port)],
env=_env env=_env
) )
except KeyboardInterrupt: except KeyboardInterrupt:
@@ -555,7 +564,8 @@ def list_archetypes() -> None:
@app.command(name="web") @app.command(name="web")
def serve_web( def serve_web(
web_port: int = typer.Option(5173, "--web-port", help="Port to serve the DECNET Web Dashboard"), web_port: int = typer.Option(DECNET_WEB_PORT, "--web-port", help="Port to serve the DECNET Web Dashboard"),
host: str = typer.Option(DECNET_WEB_HOST, "--host", help="Host IP to serve the Web Dashboard"),
) -> None: ) -> None:
"""Serve the DECNET Web Dashboard frontend.""" """Serve the DECNET Web Dashboard frontend."""
import http.server import http.server
@@ -581,8 +591,8 @@ def serve_web(
import os import os
os.chdir(dist_dir) os.chdir(dist_dir)
with socketserver.TCPServer(("", web_port), SPAHTTPRequestHandler) as httpd: with socketserver.TCPServer((host, web_port), SPAHTTPRequestHandler) as httpd:
console.print(f"[green]Serving DECNET Web Dashboard on http://0.0.0.0:{web_port}[/]") console.print(f"[green]Serving DECNET Web Dashboard on http://{host}:{web_port}[/]")
try: try:
httpd.serve_forever() httpd.serve_forever()
except KeyboardInterrupt: except KeyboardInterrupt:

22
decnet/env.py Normal file
View File

@@ -0,0 +1,22 @@
import os
from pathlib import Path
from dotenv import load_dotenv
# Calculate absolute path to the project root
_ROOT: Path = Path(__file__).parent.parent.absolute()
# Load .env.local first, then fallback to .env
load_dotenv(_ROOT / ".env.local")
load_dotenv(_ROOT / ".env")
# API Options
DECNET_API_HOST: str = os.environ.get("DECNET_API_HOST", "0.0.0.0")
DECNET_API_PORT: int = int(os.environ.get("DECNET_API_PORT", "8000"))
DECNET_JWT_SECRET: str = os.environ.get("DECNET_JWT_SECRET", "fallback-secret-key-change-me")
DECNET_INGEST_LOG_FILE: str | None = os.environ.get("DECNET_INGEST_LOG_FILE", "/var/log/decnet/decnet.log")
# Web Dashboard Options
DECNET_WEB_HOST: str = os.environ.get("DECNET_WEB_HOST", "0.0.0.0")
DECNET_WEB_PORT: int = int(os.environ.get("DECNET_WEB_PORT", "8080"))
DECNET_ADMIN_USER: str = os.environ.get("DECNET_ADMIN_USER", "admin")
DECNET_ADMIN_PASSWORD: str = os.environ.get("DECNET_ADMIN_PASSWORD", "admin")

7
decnet/web/api.py
View File

@@ -20,6 +20,7 @@ from decnet.web.auth import (
) )
from decnet.web.sqlite_repository import SQLiteRepository from decnet.web.sqlite_repository import SQLiteRepository
from decnet.web.ingester import log_ingestion_worker from decnet.web.ingester import log_ingestion_worker
from decnet.env import DECNET_ADMIN_USER, DECNET_ADMIN_PASSWORD
import asyncio import asyncio
repo: SQLiteRepository = SQLiteRepository() repo: SQLiteRepository = SQLiteRepository()
@@ -31,13 +32,13 @@ async def lifespan(app: FastAPI) -> AsyncGenerator[None, None]:
global ingestion_task global ingestion_task
await repo.initialize() await repo.initialize()
# Create default admin if no users exist # Create default admin if no users exist
_admin_user: Optional[dict[str, Any]] = await repo.get_user_by_username("admin") _admin_user: Optional[dict[str, Any]] = await repo.get_user_by_username(DECNET_ADMIN_USER)
if not _admin_user: if not _admin_user:
await repo.create_user( await repo.create_user(
{ {
"uuid": str(uuid.uuid4()), "uuid": str(uuid.uuid4()),
"username": "admin", "username": DECNET_ADMIN_USER,
"password_hash": get_password_hash("admin"), "password_hash": get_password_hash(DECNET_ADMIN_PASSWORD),
"role": "admin", "role": "admin",
"must_change_password": True "must_change_password": True
} }

5
decnet/web/auth.py
View File

@@ -1,10 +1,11 @@
import os
from datetime import datetime, timedelta, timezone from datetime import datetime, timedelta, timezone
from typing import Optional, Any from typing import Optional, Any
import jwt import jwt
import bcrypt import bcrypt
SECRET_KEY: str = os.environ.get("DECNET_SECRET_KEY", "super-secret-key-change-me") from decnet.env import DECNET_JWT_SECRET
SECRET_KEY: str = DECNET_JWT_SECRET
ALGORITHM: str = "HS256" ALGORITHM: str = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES: int = 1440 ACCESS_TOKEN_EXPIRE_MINUTES: int = 1440

2
decnet_web/.gitignore vendored
View File

@@ -22,3 +22,5 @@ dist-ssr
*.njsproj *.njsproj
*.sln *.sln
*.sw? *.sw?
.env
.env.local

2
decnet_web/src/components/Dashboard.tsx
View File

@@ -52,7 +52,7 @@ const Dashboard: React.FC<DashboardProps> = ({ searchQuery }) => {
// Setup SSE connection // Setup SSE connection
const token = localStorage.getItem('token'); const token = localStorage.getItem('token');
const baseUrl = 'http://localhost:8000/api/v1'; // Or extract from api.defaults.baseURL const baseUrl = import.meta.env.VITE_API_URL || 'http://localhost:8000/api/v1';
let url = `${baseUrl}/stream?token=${token}`; let url = `${baseUrl}/stream?token=${token}`;
if (searchQuery) { if (searchQuery) {
url += `&search=${encodeURIComponent(searchQuery)}`; url += `&search=${encodeURIComponent(searchQuery)}`;

2
decnet_web/src/utils/api.ts
View File

@@ -1,7 +1,7 @@
import axios from 'axios'; import axios from 'axios';
const api = axios.create({ const api = axios.create({
baseURL: 'http://localhost:8000/api/v1', baseURL: import.meta.env.VITE_API_URL || 'http://localhost:8000/api/v1',
}); });
api.interceptors.request.use((config) => { api.interceptors.request.use((config) => {

1
pyproject.toml
View File

@@ -19,6 +19,7 @@ dependencies = [
"PyJWT>=2.8.0", "PyJWT>=2.8.0",
"bcrypt>=4.1.0", "bcrypt>=4.1.0",
"psutil>=5.9.0", "psutil>=5.9.0",
"python-dotenv>=1.0.0",
] ]
[project.optional-dependencies] [project.optional-dependencies]