diff --git a/.hypothesis/constants/19d5adc9efd5ec68 b/.hypothesis/constants/19d5adc9efd5ec68
new file mode 100644
index 0000000..372bfa2
--- /dev/null
+++ b/.hypothesis/constants/19d5adc9efd5ec68
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/web/ingester.py
+# hypothesis_version: 6.151.11
+
+['.json', 'decnet.web.ingester', 'r', 'replace', 'utf-8']
\ No newline at end of file
diff --git a/.hypothesis/constants/219a36e8b671f84b b/.hypothesis/constants/219a36e8b671f84b
new file mode 100644
index 0000000..275bac0
--- /dev/null
+++ b/.hypothesis/constants/219a36e8b671f84b
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/web/repository.py
+# hypothesis_version: 6.151.11
+
+[]
\ No newline at end of file
diff --git a/.hypothesis/constants/a3207e9522fed10c b/.hypothesis/constants/a3207e9522fed10c
new file mode 100644
index 0000000..03b8a88
--- /dev/null
+++ b/.hypothesis/constants/a3207e9522fed10c
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/web/api.py
+# hypothesis_version: 6.151.11
+
+[1000, '*', '/api/v1/auth/login', '/api/v1/logs', '/api/v1/stats', '1.0.0', 'Bearer', 'WWW-Authenticate', 'access_token', 'admin', 'bearer', 'data', 'limit', 'message', 'must_change_password', 'offset', 'password_hash', 'role', 'token_type', 'total', 'username', 'uuid']
\ No newline at end of file
diff --git a/.hypothesis/constants/ceb1d0465029fa83 b/.hypothesis/constants/ceb1d0465029fa83
new file mode 100644
index 0000000..962a59c
--- /dev/null
+++ b/.hypothesis/constants/ceb1d0465029fa83
@@ -0,0 +1,4 @@
+# file: /home/anti/.local/bin/pytest
+# hypothesis_version: 6.151.11
+
+['__main__']
\ No newline at end of file
diff --git a/.hypothesis/constants/da39a3ee5e6b4b0d b/.hypothesis/constants/da39a3ee5e6b4b0d
new file mode 100644
index 0000000..62b7279
--- /dev/null
+++ b/.hypothesis/constants/da39a3ee5e6b4b0d
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/__init__.py
+# hypothesis_version: 6.151.11
+
+[]
\ No newline at end of file
diff --git a/.hypothesis/constants/da43cd4d80a43169 b/.hypothesis/constants/da43cd4d80a43169
new file mode 100644
index 0000000..47f0424
--- /dev/null
+++ b/.hypothesis/constants/da43cd4d80a43169
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/web/sqlite_repository.py
+# hypothesis_version: 6.151.11
+
+['SELECT * FROM logs', 'active_deckies', 'attacker_ip', 'decky', 'decnet.db', 'event_type', 'fields', 'msg', 'must_change_password', 'password_hash', 'raw_line', 'role', 'service', 'timestamp', 'total', 'total_logs', 'unique_attackers', 'username', 'uuid']
\ No newline at end of file
diff --git a/.hypothesis/constants/df40fa14165138c7 b/.hypothesis/constants/df40fa14165138c7
new file mode 100644
index 0000000..f63366f
--- /dev/null
+++ b/.hypothesis/constants/df40fa14165138c7
@@ -0,0 +1,4 @@
+# file: /home/anti/Tools/DECNET/decnet/web/auth.py
+# hypothesis_version: 6.151.11
+
+[1440, 'DECNET_SECRET_KEY', 'HS256', 'exp', 'iat', 'utf-8']
\ No newline at end of file
diff --git a/.hypothesis/examples/02709a08d5dd3bf6/be0230ef54d34195 b/.hypothesis/examples/02709a08d5dd3bf6/be0230ef54d34195
new file mode 100644
index 0000000..e41229d
--- /dev/null
+++ b/.hypothesis/examples/02709a08d5dd3bf6/be0230ef54d34195
@@ -0,0 +1 @@
+¹5Uz&)Zß
\ No newline at end of file
diff --git a/.hypothesis/examples/04e6b3400353b141/02709a08d5dd3bf6 b/.hypothesis/examples/04e6b3400353b141/02709a08d5dd3bf6
new file mode 100644
index 0000000..fe3d8fc
--- /dev/null
+++ b/.hypothesis/examples/04e6b3400353b141/02709a08d5dd3bf6
@@ -0,0 +1,2 @@
+O
;}b4
+l+L=-06앀MW.secondary
\ No newline at end of file
diff --git a/.hypothesis/examples/04e6b3400353b141/07415f0af878fbe0 b/.hypothesis/examples/04e6b3400353b141/07415f0af878fbe0
new file mode 100644
index 0000000..6ea1756
--- /dev/null
+++ b/.hypothesis/examples/04e6b3400353b141/07415f0af878fbe0
@@ -0,0 +1 @@
+ֹ8 (}hYg`$lI0y}bU` e[2Pş
\ No newline at end of file
diff --git a/.hypothesis/examples/04e6b3400353b141/69de0ff9882fb7ae b/.hypothesis/examples/04e6b3400353b141/69de0ff9882fb7ae
new file mode 100644
index 0000000..1bc7bd8
Binary files /dev/null and b/.hypothesis/examples/04e6b3400353b141/69de0ff9882fb7ae differ
diff --git a/.hypothesis/examples/04e6b3400353b141/ad62dc9ce19b3e65 b/.hypothesis/examples/04e6b3400353b141/ad62dc9ce19b3e65
new file mode 100644
index 0000000..5ad10c1
Binary files /dev/null and b/.hypothesis/examples/04e6b3400353b141/ad62dc9ce19b3e65 differ
diff --git a/.hypothesis/examples/07415f0af878fbe0/59a0424d9d1db2bd b/.hypothesis/examples/07415f0af878fbe0/59a0424d9d1db2bd
new file mode 100644
index 0000000..d8e977e
Binary files /dev/null and b/.hypothesis/examples/07415f0af878fbe0/59a0424d9d1db2bd differ
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/046ad25b37468979 b/.hypothesis/examples/69de0ff9882fb7ae/046ad25b37468979
new file mode 100644
index 0000000..d5dd383
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/046ad25b37468979
@@ -0,0 +1 @@
+Û
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/145ce512e57fc774 b/.hypothesis/examples/69de0ff9882fb7ae/145ce512e57fc774
new file mode 100644
index 0000000..7f5b420
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/145ce512e57fc774
@@ -0,0 +1 @@
+×
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/1f3d226b8b16b85f b/.hypothesis/examples/69de0ff9882fb7ae/1f3d226b8b16b85f
new file mode 100644
index 0000000..cc0b532
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/1f3d226b8b16b85f
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/2a4604391a6a3a01 b/.hypothesis/examples/69de0ff9882fb7ae/2a4604391a6a3a01
new file mode 100644
index 0000000..0e5befe
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/2a4604391a6a3a01
@@ -0,0 +1 @@
+Í
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/327ebe8e2777678d b/.hypothesis/examples/69de0ff9882fb7ae/327ebe8e2777678d
new file mode 100644
index 0000000..e185c40
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/327ebe8e2777678d
@@ -0,0 +1 @@
+ß
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/6bd8eb2cdf74b98a b/.hypothesis/examples/69de0ff9882fb7ae/6bd8eb2cdf74b98a
new file mode 100644
index 0000000..ed3a940
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/6bd8eb2cdf74b98a
@@ -0,0 +1 @@
+𣟡
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/6f5b1e7034c7c5b5 b/.hypothesis/examples/69de0ff9882fb7ae/6f5b1e7034c7c5b5
new file mode 100644
index 0000000..d2738a7
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/6f5b1e7034c7c5b5
@@ -0,0 +1 @@
+Ù
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/723685965ac5ff1d b/.hypothesis/examples/69de0ff9882fb7ae/723685965ac5ff1d
new file mode 100644
index 0000000..2de7595
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/723685965ac5ff1d
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/7960c8d6f8ec07ac b/.hypothesis/examples/69de0ff9882fb7ae/7960c8d6f8ec07ac
new file mode 100644
index 0000000..48d57f6
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/7960c8d6f8ec07ac
@@ -0,0 +1 @@
+ϡ
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/7b7a86f12d6b5938 b/.hypothesis/examples/69de0ff9882fb7ae/7b7a86f12d6b5938
new file mode 100644
index 0000000..685d9a9
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/7b7a86f12d6b5938
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/8cd72bc129890193 b/.hypothesis/examples/69de0ff9882fb7ae/8cd72bc129890193
new file mode 100644
index 0000000..fa7b733
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/8cd72bc129890193
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/8ce546b5eb9b0f31 b/.hypothesis/examples/69de0ff9882fb7ae/8ce546b5eb9b0f31
new file mode 100644
index 0000000..9277a86
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/8ce546b5eb9b0f31
@@ -0,0 +1 @@
+Ý
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/d0c027c0d942995f b/.hypothesis/examples/69de0ff9882fb7ae/d0c027c0d942995f
new file mode 100644
index 0000000..3a1b92a
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/d0c027c0d942995f
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/df68ad765d78d039 b/.hypothesis/examples/69de0ff9882fb7ae/df68ad765d78d039
new file mode 100644
index 0000000..2049fd9
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/df68ad765d78d039
@@ -0,0 +1 @@
+á
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/eb0808fd117cb24f b/.hypothesis/examples/69de0ff9882fb7ae/eb0808fd117cb24f
new file mode 100644
index 0000000..d84880e
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/eb0808fd117cb24f
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/examples/69de0ff9882fb7ae/ef6e2c7c5727ec10 b/.hypothesis/examples/69de0ff9882fb7ae/ef6e2c7c5727ec10
new file mode 100644
index 0000000..6d5311d
--- /dev/null
+++ b/.hypothesis/examples/69de0ff9882fb7ae/ef6e2c7c5727ec10
@@ -0,0 +1 @@
+¹
\ No newline at end of file
diff --git a/.hypothesis/examples/ad62dc9ce19b3e65/0063f278d45b843e b/.hypothesis/examples/ad62dc9ce19b3e65/0063f278d45b843e
new file mode 100644
index 0000000..9ce2777
--- /dev/null
+++ b/.hypothesis/examples/ad62dc9ce19b3e65/0063f278d45b843e
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/.hypothesis/unicode_data/16.0.0/charmap.json.gz b/.hypothesis/unicode_data/16.0.0/charmap.json.gz
new file mode 100644
index 0000000..febd313
Binary files /dev/null and b/.hypothesis/unicode_data/16.0.0/charmap.json.gz differ
diff --git a/.hypothesis/unicode_data/16.0.0/codec-utf-8.json.gz b/.hypothesis/unicode_data/16.0.0/codec-utf-8.json.gz
new file mode 100644
index 0000000..e8aecaa
Binary files /dev/null and b/.hypothesis/unicode_data/16.0.0/codec-utf-8.json.gz differ
diff --git a/decnet.db b/decnet.db
index 9170f32..43aea2c 100644
Binary files a/decnet.db and b/decnet.db differ
diff --git a/decnet.log b/decnet.log
index 2ec9e77..156d569 100644
--- a/decnet.log
+++ b/decnet.log
@@ -223,3 +223,133 @@
<134>1 2026-04-07T20:24:03.279897+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
<134>1 2026-04-07T20:24:03.283256+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
<134>1 2026-04-07T20:24:03.297543+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
+<134>1 2026-04-08T02:34:14.252618+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
+<134>1 2026-04-08T02:34:14.394371+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
+<134>1 2026-04-08T02:34:14.544200+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
+<134>1 2026-04-08T02:34:14.613141+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
+<134>1 2026-04-08T02:41:44.704390+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail
+<134>1 2026-04-08T02:41:44.712319+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail
+<134>1 2026-04-08T02:41:44.715798+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail
+<134>1 2026-04-08T02:41:44.761105+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail
+<134>1 2026-04-08T03:04:58.479955+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="59596"]
+<134>1 2026-04-08T03:04:58.479944+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="60948"]
+<134>1 2026-04-08T03:04:58.479908+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="50740"]
+<134>1 2026-04-08T03:04:58.482589+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:04.485896+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
+<134>1 2026-04-08T03:05:04.485896+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]
+<134>1 2026-04-08T03:05:04.486195+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
+<134>1 2026-04-08T03:05:04.486265+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
+<134>1 2026-04-08T03:05:09.490954+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:09.491082+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:09.491362+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50502"]
+<134>1 2026-04-08T03:05:09.491458+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36034"]
+<134>1 2026-04-08T03:05:09.491503+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]
+<134>1 2026-04-08T03:05:09.491587+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]
+<134>1 2026-04-08T03:05:14.497117+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:14.497128+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.778507+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57398"]
+<134>1 2026-04-08T03:05:15.778969+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57412"]
+<134>1 2026-04-08T03:05:15.780606+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36044"]
+<134>1 2026-04-08T03:05:15.786241+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50504"]
+<134>1 2026-04-08T03:05:15.786522+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50510"]
+<134>1 2026-04-08T03:05:15.787287+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57414"]
+<134>1 2026-04-08T03:05:15.788057+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '441', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="00000001-00000001<_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance"]
+<134>1 2026-04-08T03:05:15.788277+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.788579+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.788832+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.789126+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.789433+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.791597+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
+<134>1 2026-04-08T03:05:15.789747+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.788454+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD'}" body=""]
+<134>1 2026-04-08T03:05:15.789250+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.788723+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close', 'Content-Length': '88'}" body=" system.listMethods "]
+<134>1 2026-04-08T03:05:15.789635+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
+<134>1 2026-04-08T03:05:15.788996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.795508+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
+<134>1 2026-04-08T03:05:15.795759+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
+<134>1 2026-04-08T03:05:15.795842+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
+<134>1 2026-04-08T03:05:15.796119+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.796206+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.796294+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HELP"]
+<134>1 2026-04-08T03:05:15.796361+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="AUTH NTLM"]
+<134>1 2026-04-08T03:05:15.796438+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'GET'}" body=""]
+<134>1 2026-04-08T03:05:15.796615+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '1', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '0', 'Connection': 'close', 'Host': '192.168.1.110'}" body=""]
+<134>1 2026-04-08T03:05:15.796792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.796942+00:00 decky-webmail http - request [decnet@55555 method="PLEU" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.798121+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
+<134>1 2026-04-08T03:05:15.798138+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.798209+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.798273+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.798346+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.800770+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36046"]
+<134>1 2026-04-08T03:05:15.800943+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57418"]
+<134>1 2026-04-08T03:05:15.800994+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'POST'}" body=""]
+<134>1 2026-04-08T03:05:15.801454+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.801656+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
+<134>1 2026-04-08T03:05:15.801600+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.801764+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.802579+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36056"]
+<134>1 2026-04-08T03:05:15.802672+00:00 decky-webmail smtp - auth_attempt [decnet@55555 src="192.168.1.5" command="AUTH NTLM"]
+<134>1 2026-04-08T03:05:15.802794+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.802586+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT'}" body=""]
+<134>1 2026-04-08T03:05:15.802776+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]
+<134>1 2026-04-08T03:05:15.806436+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="000b AUTHENTICATE NTLM"]
+<134>1 2026-04-08T03:05:15.806511+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50526"]
+<134>1 2026-04-08T03:05:15.806571+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE'}" body=""]
+<134>1 2026-04-08T03:05:15.806924+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]
+<134>1 2026-04-08T03:05:15.806923+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]
+<134>1 2026-04-08T03:05:15.807082+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE'}" body=""]
+<134>1 2026-04-08T03:05:15.810419+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.810466+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.810532+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.810761+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS'}" body=""]
+<134>1 2026-04-08T03:05:15.813097+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT'}" body=""]
+<134>1 2026-04-08T03:05:15.817009+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH'}" body=""]
+<134>1 2026-04-08T03:05:15.828253+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57434"]
+<134>1 2026-04-08T03:05:15.828499+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]
+<134>1 2026-04-08T03:05:15.828518+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]
+<134>1 2026-04-08T03:05:15.829131+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]
+<134>1 2026-04-08T03:05:15.829468+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.829643+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57444"]
+<134>1 2026-04-08T03:05:15.844265+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57454"]
+<134>1 2026-04-08T03:05:15.844481+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.844597+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]
+<134>1 2026-04-08T03:05:15.844682+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36068"]
+<134>1 2026-04-08T03:05:15.845057+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36082"]
+<134>1 2026-04-08T03:05:15.845197+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="( $9���OX1��U�:5u���>�+7�%� II=%b�Tz��_�/���[�o�Q� r 3 9 5 /�,�0 �̨̩̪�����\]�a�S�+�/ ������\\�`�R"]
+<134>1 2026-04-08T03:05:15.845325+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="� �� � E ����Q ����P = � <