feat: add .env based configuration for API, Web, and Auth options

This commit is contained in:
2026-04-08 01:24:49 -04:00
parent 31e0c5151b
commit 32b06afef6
76 changed files with 600 additions and 64 deletions

11
.env.example Normal file
View File

@@ -0,0 +1,11 @@
# API Options
DECNET_API_HOST=0.0.0.0
DECNET_API_PORT=8000
DECNET_JWT_SECRET=supersecretkey12345
DECNET_INGEST_LOG_FILE=/var/log/decnet/decnet.log
# Web Dashboard Options
DECNET_WEB_HOST=0.0.0.0
DECNET_WEB_PORT=8080
DECNET_ADMIN_USER=admin
DECNET_ADMIN_PASSWORD=admin

2
.gitignore vendored
View File

@@ -17,3 +17,5 @@ webmail
windows1
*.db
decnet.json
.env
.env.local

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/auth.py
# hypothesis_version: 6.151.11
[1440, 'HS256', 'exp', 'iat', 'utf-8']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/ini_loader.py
# hypothesis_version: 6.151.11
[100, 512, 1024, ',', '.', '1', '[', ']', 'amount', 'archetype', 'binary', 'custom-', 'exceeds maximum', 'exec', 'general', 'gw', 'interface', 'ip', 'log-target', 'log_target', 'mutate-interval', 'mutate_interval', 'net', 'nmap-os', 'nmap_os', 'ports', 'services']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[5173, 8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/env.py
# hypothesis_version: 6.151.11
['.env', '.env.local', '0.0.0.0', '8000', '8080', 'DECNET_ADMIN_USER', 'DECNET_API_HOST', 'DECNET_API_PORT', 'DECNET_JWT_SECRET', 'DECNET_WEB_HOST', 'DECNET_WEB_PORT', 'admin']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/auth.py
# hypothesis_version: 6.151.11
[1440, 'HS256', 'exp', 'iat', 'utf-8']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/ini_loader.py
# hypothesis_version: 6.151.11
[',', '.', '1', 'amount', 'archetype', 'binary', 'custom-', 'exec', 'general', 'gw', 'interface', 'ip', 'log-target', 'log_target', 'mutate-interval', 'mutate_interval', 'net', 'nmap-os', 'nmap_os', 'ports', 'services']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 1000, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/sqlite_repository.py
# hypothesis_version: 6.151.11
['SELECT * FROM logs', 'active_deckies', 'attacker_ip', 'decky', 'decnet.db', 'deployed_deckies', 'event_type', 'fields', 'max_id', 'msg', 'must_change_password', 'password_hash', 'raw_line', 'role', 'service', 'timestamp', 'total', 'total_logs', 'unique_attackers', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/web/api.py
# hypothesis_version: 6.151.11
[400, 404, 500, 512, 1000, 1024, '*', '/api/v1/auth/login', '/api/v1/deckies', '/api/v1/logs', '/api/v1/stats', '/api/v1/stream', '1.0.0', 'Authorization', 'Bearer', 'Bearer ', 'Decky not found', 'No active deployment', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'decnet.web.api', 'id', 'lastEventId', 'limit', 'logs', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'stats', 'text/event-stream', 'token', 'token_type', 'total', 'type', 'unihost', 'username', 'uuid']

View File

@@ -0,0 +1,4 @@
# file: /home/anti/Tools/DECNET/decnet/cli.py
# hypothesis_version: 6.151.11
[5173, 8000, ',', ', ', '--all', '--api', '--api-port', '--archetype', '--config', '--deckies', '--decky', '--distro', '--dry-run', '--emit-syslog', '--host', '--id', '--interface', '--ip-start', '--ipvlan', '--log-file', '--log-target', '--min-deckies', '--mode', '--mutate-interval', '--no-cache', '--output', '--port', '--randomize-distros', '--randomize-services', '--services', '--subnet', '--watch', '--web-port', '-a', '-c', '-d', '-f', '-i', '-m', '-n', '-o', '-w', '/index.html', '0.0.0.0', 'Available Services', 'Default Services', 'Description', 'Display Name', 'Docker Image', 'Image', 'Machine Archetypes', 'Name', 'Ports', 'Slug', 'archetypes', 'bold cyan', 'correlate', 'decnet', 'decnet.cli', 'decnet.log', 'decnet.web.api:app', 'decnet_web', 'dim', 'dist', 'distros', 'green', 'json', 'linux', 'mutate', 'services', 'swarm', 'syslog', 'table', 'unihost', 'uvicorn', 'web']

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙没锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙喹狇妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𥕻񏭔򣬝򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙么每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙貌煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聮聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮000000000i聝聫聭聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𒆌򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𒆄򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙啜瘩妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𑲎򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙冒煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙陆脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聶颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙脮脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐙿󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聛聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀞򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙酄€饞到駨瓟颍瑵颛尘髝憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐀉<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙梅锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙酄€饜€<EFBFBD>彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐑇<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙霉镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ񊋷񏭔򣬝򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𐀀𐀅<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙庐每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙炉锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐏕򣬝򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聠玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聜玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙脳盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聛聭聵聹聽拢颅脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𒸝񏭔򣬝򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙卤脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙脙脵脹盲么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𓵿󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𐀀𐀀𐀀𒹿󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聜媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙么玫梅酶煤媒镁每锘<EFBFBD>妺否彮旘С倔€憢€

View File

@@ -1 +0,0 @@
<EFBFBD>I0000000000€€€€€€€€€€€€€€€€€€€€ࠀ𒹭񏭔򣬝򧳾󀑋<EFBFBD>

View File

@@ -1 +0,0 @@
烮0000000000聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙聙媒锘<EFBFBD>妺否彮旘С倔€憢€

Binary file not shown.

View File

@@ -490,6 +490,30 @@ See [`test-full.ini`](test-full.ini) — covers all 25 services across 10 role-t
---
## Environment Configuration (.env)
DECNET supports loading configuration from `.env.local` and `.env` files located in the project root. This is useful for securing secrets like the JWT key and configuring default ports without passing flags every time.
An example `.env.example` is provided:
```ini
# API Options
DECNET_API_HOST=0.0.0.0
DECNET_API_PORT=8000
DECNET_JWT_SECRET=supersecretkey12345
DECNET_INGEST_LOG_FILE=/var/log/decnet/decnet.log
# Web Dashboard Options
DECNET_WEB_HOST=0.0.0.0
DECNET_WEB_PORT=8080
DECNET_ADMIN_USER=admin
DECNET_ADMIN_PASSWORD=admin
```
Copy `.env.example` to `.env.local` and modify it to suit your environment.
---
## Logging
All attacker interactions are forwarded off the decoy network to an isolated logging sink. The log pipeline lives on a separate internal Docker bridge (`decnet_logs`) that is not reachable from the fake LAN.

BIN
decnet.db

Binary file not shown.

View File

@@ -361,3 +361,446 @@
<134>1 2026-04-08T03:05:15.848801+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50550"]
<134>1 2026-04-08T03:05:15.848882+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>뎱sr<73>` <>B @<40>&<26><>cG|$G<>͒
<EFBFBD>/<2F>"]
<134>1 2026-04-08T03:05:15.848949+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T03:05:15.849007+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T03:05:15.849061+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T03:21:44.871598+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T03:21:44.905490+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T03:21:44.944053+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T03:21:45.112633+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T03:29:47.393300+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T03:29:47.490394+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T03:29:47.642795+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T03:29:47.694889+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.195876+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.250767+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T04:18:50.349723+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T04:18:50.507767+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T04:19:42.933390+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail
<134>1 2026-04-08T04:19:43.015625+00:00 decky-webmail rdp - startup - RDP server starting as decky-webmail on port 3389
<134>1 2026-04-08T04:21:14.872728+00:00 decky-webmail vnc - startup - VNC server starting as decky-webmail
<134>1 2026-04-08T04:21:14.922524+00:00 decky-webmail mysql - startup - MySQL server starting as decky-webmail
<134>1 2026-04-08T04:21:30.999239+00:00 decky-webmail tftp - startup - TFTP server starting as decky-webmail
<134>1 2026-04-08T04:21:31.045857+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.249873+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.429939+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-08T04:31:57.529212+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-08T04:31:57.630505+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
<134>1 2026-04-08T04:32:28.201534+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46314"]
<134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="58706"]
<134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="52752"]
<134>1 2026-04-08T04:32:28.204354+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]
<134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:34.208779+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:34.208799+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:39.213936+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:39.214047+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:39.214360+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49084"]
<134>1 2026-04-08T04:32:39.214382+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46786"]
<134>1 2026-04-08T04:32:39.214547+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]
<134>1 2026-04-08T04:32:39.214632+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
<134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.500361+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49086"]
<134>1 2026-04-08T04:32:45.502004+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39446"]
<134>1 2026-04-08T04:32:45.502741+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49096"]
<134>1 2026-04-08T04:32:45.502819+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46800"]
<134>1 2026-04-08T04:32:45.503064+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49100"]
<134>1 2026-04-08T04:32:45.505187+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39462"]
<134>1 2026-04-08T04:32:45.506648+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.506887+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.507420+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.509431+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.509415+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.509673+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.509692+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.507695+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508029+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.508606+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '88', 'Connection': 'close', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"]
<134>1 2026-04-08T04:32:45.507559+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:45.508180+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.507206+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.507859+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Content-Length': '441', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]
<134>1 2026-04-08T04:32:45.508429+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.512673+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512833+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="AUTH NTLM"]
<134>1 2026-04-08T04:32:45.512718+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512839+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HELP"]
<134>1 2026-04-08T04:32:45.512946+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.512953+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'Connection': 'close', 'Depth': '1', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.513069+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39468"]
<134>1 2026-04-08T04:32:45.513162+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.513355+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'GET', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.513603+00:00 decky-webmail http - request [decnet@55555 method="AOGT" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.514852+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
<134>1 2026-04-08T04:32:45.514886+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.515015+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.514996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.516930+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39484"]
<134>1 2026-04-08T04:32:45.517101+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.517216+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.517249+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'POST', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.517429+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.517595+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.518030+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.518736+00:00 decky-webmail smtp - auth_attempt [decnet@55555 src="192.168.1.5" command="AUTH NTLM"]
<134>1 2026-04-08T04:32:45.518832+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.518681+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.518908+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.518882+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:32:45.522434+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46808"]
<134>1 2026-04-08T04:32:45.522593+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.523103+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46824"]
<134>1 2026-04-08T04:32:45.523193+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.526709+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="000b AUTHENTICATE NTLM"]
<134>1 2026-04-08T04:32:45.526838+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.527952+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
<134>1 2026-04-08T04:32:45.528983+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.529094+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.529093+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.532765+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:32:45.544239+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39490"]
<134>1 2026-04-08T04:32:45.544576+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
<134>1 2026-04-08T04:32:45.544692+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:32:45.545200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:32:45.545544+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.545703+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39494"]
<134>1 2026-04-08T04:32:45.545844+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39496"]
<134>1 2026-04-08T04:32:45.545941+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546026+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546115+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49108"]
<134>1 2026-04-08T04:32:45.546344+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
<134>1 2026-04-08T04:32:45.546453+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.546550+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49124"]
<134>1 2026-04-08T04:32:45.546634+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="($m|0<>Z<EFBFBD>bR<62> <0C><>"]
<134>1 2026-04-08T04:32:45.546720+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="T<>"]
<134>1 2026-04-08T04:32:45.546774+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>l<EFBFBD>S<EFBFBD><12>Z}:<3A><16> y<><79>^ <0B><><EFBFBD>ҡ<EFBFBD>b
k}c<><63>t+m)G_<47>s<EFBFBD>1;<3B>>r395/<2F>,<2C>0<00>̨̩̪<CCA8><CCAA><EFBFBD><EFBFBD><EFBFBD>\]<5D>a<EFBFBD>S<EFBFBD>+<2B>/<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>\\<5C>`<60>R<EFBFBD>$<24>(k<>s<EFBFBD>w<00><>#<23>'g<>r<EFBFBD>v<00><>"]
<134>1 2026-04-08T04:32:45.546841+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22><00><> <09>E<00><><EFBFBD><EFBFBD>Q<00><><EFBFBD><EFBFBD>P=<00><<00><00>Ai<> "]
<134>1 2026-04-08T04:32:45.546902+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<11><11><11>#
(&    "]
<134>1 2026-04-08T04:32:45.546959+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=" +-3<04><04><11><04>L<EFBFBD>{<1B><><EFBFBD><EFBFBD>N<1D>'PȞ[<5B>`<1B><>c8G<x-<10>K<EFBFBD><4B><EFBFBD><EFBFBD><EFBFBD>tDa ۘ`TF<54>'<27>%TK<54><4B>Fu<46>\\<5C><>t<EFBFBD>6><3E>P%<25><><EFBFBD>ն<14><>x<EFBFBD><78><EFBFBD><EFBFBD><EFBFBD><1D>P|<7C><>j7"]
<134>1 2026-04-08T04:32:45.547020+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>7<EFBFBD>*<2A>x<>Nw ZŽUk2o<><6F>!X<><58>ԫ<EFBFBD>l<1A>#_<17>
<EFBFBD>0<>BR<42><52><EFBFBD>\]q<><71><EFBFBD>y<EFBFBD><79><EFBFBD>7<>W=^E<>􈠌uk<75><6B>%sZ<73><5A>S<EFBFBD>0<EFBFBD><$+_<>D<EFBFBD><44>(<28>ۼ<EFBFBD>\\<5C><><EFBFBD>ѕ<><D195>wI<77>񡟐;(>A<><41><EFBFBD><EFBFBD>ؼu<D8BC><75> <0B>{<7B>|<7C><>j["]
<134>1 2026-04-08T04:32:45.547092+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/z<><7A><EFBFBD>T<><54>YvNOb3GAD<41>@Yb<59>::<06>m<EFBFBD><6D>ep;'W-S֭K<D6AD>T<EFBFBD>|30L.<2E><>/1<18>d<EFBFBD>l/<2F><>&<26>!<21> Чa<D0A7>I}ns<6E><73>Y<EFBFBD><59>K<>x(kc<6B><63>w<EFBFBD>?'3<11>tT<74>ق<EFBFBD><D982>1慼i<E685BC><69><15><>y<7F><79><EFBFBD><EFBFBD><EFBFBD><EFBFBD><18>K_"]
<134>1 2026-04-08T04:32:45.547159+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22>EPc<50>@<40><><EFBFBD>\]<5D>a<>t_ȉ<5F><C889><01><>C $8:<3A><><EFBFBD>^<5E><gf<67><66>1<15>)_3$}<7D><>e<EFBFBD><65>Pi}1<><14>Pl\]<5D><><EFBFBD><EFBFBD><EFBFBD>{w<>?<1B>-<2D><04>_F<5F><46>+<2B>jo<6A>y~%V<><56> <09>K<EFBFBD>,<2C>J^<5E>~<7E><><EFBFBD><12>,<2C><><EFBFBD><EFBFBD>66<1B>dQ<1F>"]
<134>1 2026-04-08T04:32:45.547212+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD><1A>9[<5B> <0C><>_@<40><><EFBFBD>Yªa3@ Q<>.u<>X<EFBFBD><1C>K{<7B>1<EFBFBD>.<2E>*0<>T<>Ɂ"]
<134>1 2026-04-08T04:32:45.547302+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49140"]
<134>1 2026-04-08T04:32:45.547392+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>m<EFBFBD> <0B><><EFBFBD>=2K<32>:<3A><>(<28>)I <>Ih<49><04>g<EFBFBD>H"]
<134>1 2026-04-08T04:32:45.547469+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T04:32:45.547551+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.547566+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46836"]
<134>1 2026-04-08T04:32:45.547629+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.547859+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46848"]
<134>1 2026-04-08T04:32:45.547969+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="($#<23><><EFBFBD><EFBFBD><EFBFBD> <0C><1B><>#\"<22>, <0C><>m<EFBFBD><6D><EFBFBD><EFBFBD>sd<00><>o1<6F> k<04>rA<>1<0E>Z<EFBFBD>1Ka$<24>9{<7B>I<EFBFBD>E<01><><EFBFBD>G<EFBFBD>r395/<2F>,<2C>0<00>̨̩̪<CCA8><CCAA><EFBFBD><EFBFBD><EFBFBD>\]<5D>a<EFBFBD>S<EFBFBD>+<2B>/<00><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>\\<5C>`<60>R"]
<134>1 2026-04-08T04:32:45.548059+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><00><> <09>E<00><><EFBFBD><EFBFBD>Q<00><><EFBFBD><EFBFBD>P=<00><<00><00>Ai<> "]
<134>1 2026-04-08T04:32:45.548124+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<11><11><11>#
(&    "]
<134>1 2026-04-08T04:32:45.548183+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd=" +-3<04><04><11><04><>OY7)1Yy<59>7tko){<1E>\"\]<5D><><EFBFBD><08>Eq<>u<EFBFBD>:rt<><07><><EFBFBD>"]
<134>1 2026-04-08T04:32:45.548238+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<02><>m<>Q؄#%<25>"]
<134>1 2026-04-08T04:32:45.548286+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="K<><4B> <0C>s@)Q;К-<2D>e<30>2<EFBFBD><1D>F3<46><33>4<EFBFBD>5<EFBFBD><5A>#<23>6<>2<EFBFBD>F6<46>\\K<><4B>8D<38>zkЯ{hm<68><6D>i,<2C>uLH9r<39>Q<><51><EFBFBD>ꦧ&:fo<66><6F><EFBFBD><03>q<EFBFBD>U_=T<>kgF<12><04>B<EFBFBD><18><><EFBFBD><78>|<7C>H<EFBFBD><48><EFBFBD>
<EFBFBD>1<EFBFBD>WvC<76><43>"]
<134>1 2026-04-08T04:32:45.548341+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD>Z<EFBFBD><5A>+<01>e<EFBFBD><65>.<2E><>$)&KC<4B><43><EFBFBD>֤<>?<3F>j#k<>@raE<61>$F<08><><1B>Ҟ<EFBFBD>7<EFBFBD><37><EFBFBD><EFBFBD><05><>feڨNY<4E><02>7 "]
<134>1 2026-04-08T04:32:45.548392+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<06>Ǭ:hvL<76>9<EFBFBD>'/<2F>x<1D><><EFBFBD><EFBFBD>e0<65>'<07><><EFBFBD><EFBFBD>EPγ<50>v<EFBFBD><76>DP\\<5C><>~|t_<74><17>S8+,gu؏2c;f֮<66><D6AE>N0 <0C><><EFBFBD>=<3D>Q<EFBFBD>U{<7B><>"]
<134>1 2026-04-08T04:32:45.548445+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22><><EFBFBD>y<>u<11>aάj<CEAC>O<EFBFBD><4F><EFBFBD>kid@6h$4<>¤V<C2A4>[<5B><>j*<2A><>IZik<69>ͺ<EFBFBD>yzZ<7A>[<5B><><EFBFBD>i<EFBFBD><69><EFBFBD><EFBFBD><EFBFBD><EFBFBD><>\"c<08><>&<26><><EFBFBD>x7j<37>c}w<10>D<EFBFBD><44>yB<>W<19><><EFBFBD><EFBFBD>:<3A><><1B><>gVuE<75><45>#<23><>?<3F>Q}u_CLs[!<21>x`~"]
<134>1 2026-04-08T04:32:45.548504+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd=",eѾ<65><D1BE>><<1B><>@8<>b<EFBFBD>H<7F>*<2A>Q<EFBFBD><51>d"]
<134>1 2026-04-08T04:32:45.548555+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/<17><17><>|/4Ox+<2B>R\"$&|<7C>|<7C>G<EFBFBD>tF&<26>:oj<6F>:8<>z6;<1C>&<26><>F4<>aVh<56>:<3A>(E(:<3A>\\<5C><><EFBFBD>i<EFBFBD>A ϕ<>[<5B><07><>p9<70><39>DP<44><50>X<EFBFBD>VyWs<57>8<EFBFBD>kJp<4A>iv<><12>™<EFBFBD>tBU<00>eL<65><05>Ҽ<EFBFBD>{<7B><1C><>w<EFBFBD>N"]
<134>1 2026-04-08T04:32:45.548609+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="<22>L.dw<64><77><EFBFBD><16>[\]8<>̀<EFBFBD>鐐A<E99090>/d<>y<EFBFBD><79><EFBFBD>U(9<><13><><EFBFBD><EFBFBD><EFBFBD>q<EFBFBD>RpB%,R<52><16>u<EFBFBD>j<EFBFBD>[<5B>#<>_k<5F>>:4-5<>͓r<02><> <20>t_<00>kGџ<47>ï<EFBFBD>P<4<>fC<66><43><EFBFBD><02><><11>bQ<62><51><17><>e<EFBFBD>ly|{R<>wD<77><44><EFBFBD>Z"]
<134>1 2026-04-08T04:32:45.548715+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46850"]
<134>1 2026-04-08T04:32:45.548803+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="WSi<><69>mD:=<3D>!b -h<><68>FC8b<16><>%Tn$<12><>"]
<134>1 2026-04-08T04:32:45.548870+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/"]
<134>1 2026-04-08T04:32:45.548935+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.548996+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:32:45.549037+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.641769+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46430"]
<134>1 2026-04-08T04:34:27.641695+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49146"]
<134>1 2026-04-08T04:34:27.641860+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53734"]
<134>1 2026-04-08T04:34:27.642208+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:27.963390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:27.963544+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:27.963788+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.013757+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.113178+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.162993+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:28.163187+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Command': 'stop-debug', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.163350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:34:28.212662+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.262348+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.311917+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/gxwjhapmmlcwofnrduso.htm" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.361795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53744"]
<134>1 2026-04-08T04:34:28.411218+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="ieU<1C><>random1random2random3random4 /"]
<134>1 2026-04-08T04:34:28.510359+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.510795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53758"]
<134>1 2026-04-08T04:34:28.560327+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:28.560615+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Host: 192.168.1.110:143"]
<134>1 2026-04-08T04:34:28.560715+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:28.560793+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:28.560853+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Connection: close"]
<134>1 2026-04-08T04:34:28.560911+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:28.560972+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:28.561026+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept: */*"]
<134>1 2026-04-08T04:34:28.561070+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:28.610137+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '279'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]
<134>1 2026-04-08T04:34:28.659214+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.659222+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46446"]
<134>1 2026-04-08T04:34:28.659488+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/kgapwlzcogfuecel" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:28.809342+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:28.809735+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46460"]
<134>1 2026-04-08T04:34:28.859483+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:28.859681+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:28.859757+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:28.859813+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:28.859866+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:28.859911+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:28.859956+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:28.859999+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:28.860044+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:28.860089+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:28.958529+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.009095+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41536"]
<134>1 2026-04-08T04:34:29.009535+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '52', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]
<134>1 2026-04-08T04:34:29.058524+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:29.058802+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:29.058891+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:29.058945+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:29.058861+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:34:29.058997+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:29.059047+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:29.059098+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:29.059145+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:29.059189+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:29.059230+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:29.158241+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.158477+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'keep-alive'}" body=""]
<134>1 2026-04-08T04:34:29.207908+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41550"]
<134>1 2026-04-08T04:34:29.208080+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '86'}" body="<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<probe type=\"string\"><![CDATA[
nmap
\]\]></probe>"]
<134>1 2026-04-08T04:34:29.257438+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]
<134>1 2026-04-08T04:34:29.257751+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]
<134>1 2026-04-08T04:34:29.257694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.257884+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]
<134>1 2026-04-08T04:34:29.257974+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]
<134>1 2026-04-08T04:34:29.258032+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]
<134>1 2026-04-08T04:34:29.258080+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]
<134>1 2026-04-08T04:34:29.258129+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]
<134>1 2026-04-08T04:34:29.258174+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]
<134>1 2026-04-08T04:34:29.258223+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]
<134>1 2026-04-08T04:34:29.258272+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]
<134>1 2026-04-08T04:34:29.307234+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.356827+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
<134>1 2026-04-08T04:34:29.407235+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622867" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.456694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.506114+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/_vti_inf.html" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.555725+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Depth': '0', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.605201+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.654617+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/wp-login.php" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:34:29.704717+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '515'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27cuxofalugy%27%2C%27%24P%24Djsjxyosd6B5frRclNct4qeaZULzkB0%27%2C%27qwotrmiw%40ntqtr.ccl%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27cuxofalugy%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=gaoqzhwizf&name[0\]=gyuzblwqen&pass=dmjqfajxdl&form_id=user_login&op=Log"]
<134>1 2026-04-08T04:34:29.810112+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/jjmxzlevuebb" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '100'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]
<134>1 2026-04-08T04:34:38.361667+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:48.534689+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:34:58.706568+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:08.879384+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:19.053295+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:29.235485+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:39.415532+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:49.592599+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:35:59.756064+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:09.927932+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:20.103389+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:30.278231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:40.452159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:36:50.627441+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:00.805486+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:10.985663+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:21.164276+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:31.343959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:41.513620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:37:51.686550+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:01.867615+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:14.339487+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.339642+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.339868+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.388633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.538152+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:14.538437+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '279', 'Content-Type': 'application/xml', 'Connection': 'close'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]
<134>1 2026-04-08T04:38:14.538620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]
<134>1 2026-04-08T04:38:14.587535+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/cmdownloads/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.636783+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.686632+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.735926+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/axis2/services/listServices" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.785827+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775623094" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.835450+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.885099+00:00 decky-webmail http - request [decnet@55555 method="PING" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.934607+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:14.984097+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/tyheprdaujfbthwwjkhn.htm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.034696+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/customtags/l10n.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.084303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/otjvfpzykizeggiw" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.134866+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': \"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'\].addHeader('X-Check-Struts', 'ymxswcup')}.multipart/form-data\", 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.184223+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.233940+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.283612+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '515', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27krlubtiqnr%27%2C%27%24P%24DwexvruonI3jQ27oea2L2i95hW0HzI1%27%2C%27xidhzpcb%40ikrvb.coi%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27krlubtiqnr%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=ofaiwvjtag&name[0\]=osbcgzljhk&pass=zjmhuddvgs&form_id=user_login&op=Log"]
<134>1 2026-04-08T04:38:15.333141+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.382571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/xmldata" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.432225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/administrator/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.482610+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php/wp-json/wp/v2/posts/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.532159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/sdk/../../../../../..//etc/vmware/hostd/vmInventory.xml" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.780925+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/euyecualobsc" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '100', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]
<134>1 2026-04-08T04:38:15.830510+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '86', 'Connection': 'close'}" body="<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<probe type=\"string\"><![CDATA[
nmap
\]\]></probe>"]
<134>1 2026-04-08T04:38:15.879684+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.929120+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/administrator/enter.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:15.979007+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Access-Control-Request-Method': 'HEAD', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Origin': 'example.com', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]
<134>1 2026-04-08T04:38:16.029351+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.078947+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '52', 'Host': '192.168.1.110'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]
<134>1 2026-04-08T04:38:16.128331+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Command': 'stop-debug', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.177872+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.227447+00:00 decky-webmail http - request [decnet@55555 method="TRACE" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.276816+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Max-Forwards': '0'}" body=""]
<134>1 2026-04-08T04:38:16.326576+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/a" remote_addr="192.168.1.5" headers="{'Connection': 'keep-alive', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.378919+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:16.433168+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Depth': '0'}" body=""]
<134>1 2026-04-08T04:38:24.387985+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/b" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.537358+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/c" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.686938+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/d" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.736611+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:24.836500+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/e" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:24.985945+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/f" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.136259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/g" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.285927+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/h" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.435837+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/i" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.584954+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/j" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.734226+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/k" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:25.883337+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/l" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.033552+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/m" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.182666+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/n" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.332053+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/o" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.481239+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/p" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.630630+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/q" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.779996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/r" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:26.929147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/s" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.079388+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/t" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.228602+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/u" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.377920+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/v" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.527231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/w" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.676350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/x" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.826671+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/y" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:27.975852+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/z" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.126269+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/." remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.275457+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/-" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.424618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/1" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.573959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/2" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.723224+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/3" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:28.873171+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/4" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.023279+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/5" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.172406+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/6" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.321598+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/7" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.471054+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/8" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.620504+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/9" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:29.769853+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/+" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]
<134>1 2026-04-08T04:38:34.931252+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:45.098128+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:38:55.266996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:05.431784+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:15.596497+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:25.760275+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:35.925315+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:46.095686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:39:56.264640+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:06.430236+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:16.602221+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:26.773947+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:36.941690+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:47.110840+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:40:57.275605+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:07.440749+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:17.614316+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:27.787076+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:37.947686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:48.113508+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:41:58.276967+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:08.442086+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:18.609988+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:28.784215+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:38.953393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:49.118081+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:42:59.284941+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:09.458144+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:19.623019+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:29.788571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:39.957390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:43:50.123200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:00.291225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:10.463393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:20.627191+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:30.797913+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:40.964645+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:44:51.131638+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:01.290259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:11.447792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:21.603772+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:31.760471+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:41.920287+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:45:52.083705+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:02.251677+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:12.415397+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:22.579023+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:32.744813+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:42.906618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:46:53.074407+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:03.243877+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:13.416633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:23.586261+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:33.758032+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:43.935127+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:47:54.114409+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:04.292362+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:14.468195+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:24.638184+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:34.810944+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:44.986731+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:48:55.164385+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:05.341147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:15.516077+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:25.688891+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:35.856472+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:46.027314+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:49:56.195150+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:06.362914+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:16.530644+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:26.700683+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:36.869328+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:47.038170+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:50:57.203937+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:07.371622+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:17.539364+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:27.709347+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:37.876021+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:48.044892+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:51:58.214636+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:08.383473+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:18.550282+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:28.718453+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:38.888161+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:49.057016+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:52:59.230344+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:09.407310+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:19.581342+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:29.756369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:39.932213+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:53:50.110057+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:00.288805+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:10.464688+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:20.640778+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:30.815601+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:40.990369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:54:51.164124+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:55:01.338304+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
<134>1 2026-04-08T04:55:11.513185+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

View File

@@ -15,6 +15,13 @@ import typer
from rich.console import Console
from rich.table import Table
from decnet.env import (
DECNET_API_HOST,
DECNET_API_PORT,
DECNET_INGEST_LOG_FILE,
DECNET_WEB_HOST,
DECNET_WEB_PORT,
)
from decnet.archetypes import Archetype, all_archetypes, get_archetype
from decnet.config import (
DeckyConfig,
@@ -199,22 +206,24 @@ def _build_deckies_from_ini(
return deckies
@app.command()
def api(
port: int = typer.Option(8000, "--port", help="Port for the backend API"),
log_file: str = typer.Option("/var/log/decnet/decnet.log", "--log-file", help="Path to the DECNET log file to monitor"),
port: int = typer.Option(DECNET_API_PORT, "--port", help="Port for the backend API"),
host: str = typer.Option(DECNET_API_HOST, "--host", help="Host IP for the backend API"),
log_file: str = typer.Option(DECNET_INGEST_LOG_FILE, "--log-file", help="Path to the DECNET log file to monitor"),
) -> None:
"""Run the DECNET API and Web Dashboard in standalone mode."""
import subprocess
import sys
import os
console.print(f"[green]Starting DECNET API on port {port}...[/]")
console.print(f"[green]Starting DECNET API on {host}:{port}...[/]")
_env: dict[str, str] = os.environ.copy()
_env["DECNET_INGEST_LOG_FILE"] = str(log_file)
try:
subprocess.run(
[sys.executable, "-m", "uvicorn", "decnet.web.api:app", "--host", "0.0.0.0", "--port", str(port)],
[sys.executable, "-m", "uvicorn", "decnet.web.api:app", "--host", host, "--port", str(port)],
env=_env
)
except KeyboardInterrupt:
@@ -555,7 +564,8 @@ def list_archetypes() -> None:
@app.command(name="web")
def serve_web(
web_port: int = typer.Option(5173, "--web-port", help="Port to serve the DECNET Web Dashboard"),
web_port: int = typer.Option(DECNET_WEB_PORT, "--web-port", help="Port to serve the DECNET Web Dashboard"),
host: str = typer.Option(DECNET_WEB_HOST, "--host", help="Host IP to serve the Web Dashboard"),
) -> None:
"""Serve the DECNET Web Dashboard frontend."""
import http.server
@@ -581,8 +591,8 @@ def serve_web(
import os
os.chdir(dist_dir)
with socketserver.TCPServer(("", web_port), SPAHTTPRequestHandler) as httpd:
console.print(f"[green]Serving DECNET Web Dashboard on http://0.0.0.0:{web_port}[/]")
with socketserver.TCPServer((host, web_port), SPAHTTPRequestHandler) as httpd:
console.print(f"[green]Serving DECNET Web Dashboard on http://{host}:{web_port}[/]")
try:
httpd.serve_forever()
except KeyboardInterrupt:

22
decnet/env.py Normal file
View File

@@ -0,0 +1,22 @@
import os
from pathlib import Path
from dotenv import load_dotenv
# Calculate absolute path to the project root
_ROOT: Path = Path(__file__).parent.parent.absolute()
# Load .env.local first, then fallback to .env
load_dotenv(_ROOT / ".env.local")
load_dotenv(_ROOT / ".env")
# API Options
DECNET_API_HOST: str = os.environ.get("DECNET_API_HOST", "0.0.0.0")
DECNET_API_PORT: int = int(os.environ.get("DECNET_API_PORT", "8000"))
DECNET_JWT_SECRET: str = os.environ.get("DECNET_JWT_SECRET", "fallback-secret-key-change-me")
DECNET_INGEST_LOG_FILE: str | None = os.environ.get("DECNET_INGEST_LOG_FILE", "/var/log/decnet/decnet.log")
# Web Dashboard Options
DECNET_WEB_HOST: str = os.environ.get("DECNET_WEB_HOST", "0.0.0.0")
DECNET_WEB_PORT: int = int(os.environ.get("DECNET_WEB_PORT", "8080"))
DECNET_ADMIN_USER: str = os.environ.get("DECNET_ADMIN_USER", "admin")
DECNET_ADMIN_PASSWORD: str = os.environ.get("DECNET_ADMIN_PASSWORD", "admin")

View File

@@ -20,6 +20,7 @@ from decnet.web.auth import (
)
from decnet.web.sqlite_repository import SQLiteRepository
from decnet.web.ingester import log_ingestion_worker
from decnet.env import DECNET_ADMIN_USER, DECNET_ADMIN_PASSWORD
import asyncio
repo: SQLiteRepository = SQLiteRepository()
@@ -31,13 +32,13 @@ async def lifespan(app: FastAPI) -> AsyncGenerator[None, None]:
global ingestion_task
await repo.initialize()
# Create default admin if no users exist
_admin_user: Optional[dict[str, Any]] = await repo.get_user_by_username("admin")
_admin_user: Optional[dict[str, Any]] = await repo.get_user_by_username(DECNET_ADMIN_USER)
if not _admin_user:
await repo.create_user(
{
"uuid": str(uuid.uuid4()),
"username": "admin",
"password_hash": get_password_hash("admin"),
"username": DECNET_ADMIN_USER,
"password_hash": get_password_hash(DECNET_ADMIN_PASSWORD),
"role": "admin",
"must_change_password": True
}

View File

@@ -1,10 +1,11 @@
import os
from datetime import datetime, timedelta, timezone
from typing import Optional, Any
import jwt
import bcrypt
SECRET_KEY: str = os.environ.get("DECNET_SECRET_KEY", "super-secret-key-change-me")
from decnet.env import DECNET_JWT_SECRET
SECRET_KEY: str = DECNET_JWT_SECRET
ALGORITHM: str = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES: int = 1440

View File

@@ -22,3 +22,5 @@ dist-ssr
*.njsproj
*.sln
*.sw?
.env
.env.local

View File

@@ -52,7 +52,7 @@ const Dashboard: React.FC<DashboardProps> = ({ searchQuery }) => {
// Setup SSE connection
const token = localStorage.getItem('token');
const baseUrl = 'http://localhost:8000/api/v1'; // Or extract from api.defaults.baseURL
const baseUrl = import.meta.env.VITE_API_URL || 'http://localhost:8000/api/v1';
let url = `${baseUrl}/stream?token=${token}`;
if (searchQuery) {
url += `&search=${encodeURIComponent(searchQuery)}`;

View File

@@ -1,7 +1,7 @@
import axios from 'axios';
const api = axios.create({
baseURL: 'http://localhost:8000/api/v1',
baseURL: import.meta.env.VITE_API_URL || 'http://localhost:8000/api/v1',
});
api.interceptors.request.use((config) => {

View File

@@ -19,6 +19,7 @@ dependencies = [
"PyJWT>=2.8.0",
"bcrypt>=4.1.0",
"psutil>=5.9.0",
"python-dotenv>=1.0.0",
]
[project.optional-dependencies]