Jul 22 07:20:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1984 exit Jul 22 07:20:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1984 exit Jul 22 07:20:46 internal-jumper-server LinuxCommandsWazuh: User venky [919935]: 111 vim stage.conf Jul 22 07:20:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1984 exit Jul 22 07:20:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1984 exit Jul 22 07:20:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1985 ls Jul 22 07:20:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1985 ls Jul 22 07:20:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1986 cd passbolt/ Jul 22 07:20:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1987 ls Jul 22 07:20:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1988 cat docker-compose-ce.yaml Jul 22 07:21:03 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 69 kubectl get deploy Jul 22 07:21:19 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 70 docker -f logs aishopper Jul 22 07:21:22 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 70 docker -f logs aishopper Jul 22 07:22:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1988 cat docker-compose-ce.yaml Jul 22 07:22:23 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [919521]: 1988 cat docker-compose-ce.yaml ] Jul 22 07:30:39 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 111 vim stage.conf Jul 22 07:32:06 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 111 vim stage.conf Jul 22 07:32:06 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 111 vim stage.conf Jul 22 07:32:06 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 112 ll Jul 22 07:32:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1984 exit Jul 22 07:32:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1985 cd aishopper/ Jul 22 07:32:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1986 ll Jul 22 07:32:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1987 make psql Jul 22 07:32:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1988 cd ../ Jul 22 07:32:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1989 cd Nitrox/ Jul 22 07:32:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1990 make sql Jul 22 07:34:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1988 cat docker-compose-ce.yaml Jul 22 07:34:05 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [919521]: 1988 cat docker-compose-ce.yaml ] Jul 22 07:35:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1991 make psql Jul 22 07:35:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1992 cd ../aishopper/ Jul 22 07:35:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1993 vim .env Jul 22 07:35:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1994 psql -h 10.53.208.3 -d aishopper_v2 -U postgres Jul 22 07:40:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1995 psql -h 10.53.208.3 -d aishopper_v1 -U postgres Jul 22 07:40:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1996 make mongo Jul 22 07:41:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:41:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:41:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:28 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [938462]: 1997 vim .env] Jul 22 07:43:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [938462]: 1997 vim .env Jul 22 07:43:40 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:43:46 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:43:48 internal-jumper-server LinuxCommandsWazuh: message repeated 5 times: [ User venky [935983]: 113 sudo su - ubuntu ] Jul 22 07:43:54 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:43:54 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:43:54 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:43:54 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:44:00 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 113 sudo su - ubuntu Jul 22 07:44:01 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User venky [935983]: 113 sudo su - ubuntu ] Jul 22 07:44:09 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 114 mongosh Jul 22 07:44:14 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 115 mongosh -h 10.190.0.12 Jul 22 07:53:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1989 sudo vi docker-compose-ce.yaml Jul 22 07:53:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1989 sudo vi docker-compose-ce.yaml Jul 22 07:53:27 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1990 cat docker-compose-ce.yaml Jul 22 07:54:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1990 cat docker-compose-ce.yaml Jul 22 07:54:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1991 docker exec -i database-container bash -c 'mysqldump -u${MYSQL_USER} -p${MYSQL_PASSWORD} ${MYSQL_DATABASE}' > /home/ubuntu/passbolt/backup.sql Jul 22 07:54:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1992 dockerps Jul 22 07:54:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1993 docker ps Jul 22 07:55:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1994 docker exec -i passbolt-db-1 bash -c 'mysqldump -u${MYSQL_USER} -p${MYSQL_PASSWORD} ${MYSQL_DATABASE}' > /home/ubuntu/passbolt/backup.sql Jul 22 07:55:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1995 ls Jul 22 07:55:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1996 cat backup.sql Jul 22 07:55:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1997 ls Jul 22 08:04:55 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 71 docker logs -f aishopper Jul 22 08:04:55 internal-jumper-server LinuxCommandsWazuh: message repeated 5 times: [ User venky [2165556]: 71 docker logs -f aishopper] Jul 22 08:04:55 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 71 docker logs -f aishopper Jul 22 08:04:55 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User venky [2165556]: 71 docker logs -f aishopper] Jul 22 08:05:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1998 psql -h 10.53.208.3 -U postgres Jul 22 08:05:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 1999 psql -h 10.53.208.3 -d passbolt -U passbolt < backup1.sql Jul 22 08:05:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2000 ls Jul 22 08:05:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2001 psql -h 10.53.208.3 -d passbolt -U passbolt < backup.sql Jul 22 08:07:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1984 vim .env Jul 22 08:07:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1985 ls Jul 22 08:07:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1986 cd passbolt/ Jul 22 08:07:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1987 cat docker-compose-ce.yaml Jul 22 08:08:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2002 psql -h 10.53.208.3 -U postgres Jul 22 08:08:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2003 psql -h 10.53.208.3 -d passbolt -U passbolt < backup.sql Jul 22 08:09:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2003 psql -h 10.53.208.3 -d passbolt -U passbolt < backup.sql Jul 22 08:09:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2004 docker cp passbolt-container:/etc/passbolt/gpg/serverkey_private.asc /home/ubuntu/passbolt/serverkey_private.asc Jul 22 08:09:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2005 docker ps Jul 22 08:09:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2006 docker cp passbolt-passbolt-1:/etc/passbolt/gpg/serverkey_private.asc /home/ubuntu/passbolt/serverkey_private.asc Jul 22 08:09:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2007 ls Jul 22 08:10:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2008 docker cp passbolt-passbolt-1:/etc/passbolt/gpg/serverkey.asc /path/to/backup/serverkey.asc Jul 22 08:10:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2009 docker cp passbolt-passbolt-1:/etc/passbolt/gpg/serverkey.asc /home/ubuntu/passbolt/serverkey.asc Jul 22 08:10:26 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2010 ls Jul 22 08:11:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2010 ls Jul 22 08:12:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2010 ls Jul 22 08:12:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2010 ls Jul 22 08:12:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2011 rm backup.sql Jul 22 08:12:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2012 docker exec -i passbolt-db-1 bash -c 'pgdump -u${MYSQL_USER} -p${MYSQL_PASSWORD} ${MYSQL_DATABASE}' > /home/ubuntu/passbolt/backup.sql Jul 22 08:13:03 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 116 mongosh --host 10.190.0.12 Jul 22 08:13:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2013 docker exec -i passbolt-db-1 bash -c Jul 22 08:13:04 internal-jumper-server LinuxCommandsWazuh: User venky [935983]: 116 mongosh --host 10.190.0.12 Jul 22 08:13:06 internal-jumper-server LinuxCommandsWazuh: User venky [2165556]: 71 docker logs -f aishopper Jul 22 08:13:06 internal-jumper-server LinuxCommandsWazuh: User venky [919935]: 112 byobu Jul 22 08:13:08 internal-jumper-server LinuxCommandsWazuh: User venky [919935]: 112 byobu Jul 22 08:13:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2014 docker exec -i passbolt-db-1 bash Jul 22 08:17:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2015 docker exec -it passbolt-db-1 bash Jul 22 08:17:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2016 ls Jul 22 08:17:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2017 cat docker-compose-ce.yaml Jul 22 08:32:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2018 cd /etc/nginx/sites-enabled/ Jul 22 08:32:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2019 ls Jul 22 08:32:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2020 sudo vi passbolt.conf Jul 22 08:32:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2021 cat passbolt.conf Jul 22 08:32:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2022 i Jul 22 08:32:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2023 sudo vi stage.conf Jul 22 08:33:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2024 sudo nginx -t Jul 22 08:33:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2025 sudo vi stage.conf Jul 22 08:33:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2026 sudo nginx -t Jul 22 08:33:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2027 sudo certbot --nginx -d stage-pass.getnitro.co.in Jul 22 08:37:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1984 vim .env Jul 22 08:37:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1985 ls Jul 22 08:37:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1986 cd passbolt/ Jul 22 08:37:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1987 ls Jul 22 08:37:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1987 ls Jul 22 08:37:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1987 ls Jul 22 08:37:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1987 ls Jul 22 08:37:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2027 sudo certbot --nginx -d stage-pass.getnitro.co.in Jul 22 08:37:17 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [919521]: 2027 sudo certbot --nginx -d stage-pass.getnitro.co.in] Jul 22 08:37:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1988 docker ps Jul 22 08:37:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1988 docker ps Jul 22 08:37:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2028 pgloader Jul 22 08:37:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1988 docker ps Jul 22 08:37:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1988 docker ps Jul 22 08:37:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1989 docker compose -f docker-compose-ce.yaml exec bash Jul 22 08:37:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1990 docker compose -f docker-compose-ce.yaml exec -it bash Jul 22 08:37:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2029 sudo apt install pgloader Jul 22 08:37:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2029 sudo apt install pgloader Jul 22 08:37:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1991 docker compose -f docker-compose-ce.yaml exec bash -li Jul 22 08:37:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2030 cd Jul 22 08:37:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1991 docker compose -f docker-compose-ce.yaml exec bash -li Jul 22 08:38:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2030 cd Jul 22 08:38:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2031 docker ps Jul 22 08:38:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2031 docker ps Jul 22 08:40:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1988 cd Jul 22 08:40:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1989 cd Nitrox/ Jul 22 08:40:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1992 docker exec -it 0db9c33e2a4a bash Jul 22 08:40:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1993 ls Jul 22 08:40:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [998823]: 1990 make env Jul 22 08:40:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1993 ls Jul 22 08:40:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1994 vi docker-compose-ce.yaml Jul 22 08:40:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2032 pgloader mysql://passbolt:P4ssb0lt@passbolt-db-1:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:41:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2033 pgloader mysql://passbolt:P4ssb0lt@d71afd1620e5:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:41:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2034 docker inspect d71afd1620e5 Jul 22 08:42:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2035 pgloader mysql://passbolt:P4ssb0lt@db:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:42:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2036 docker inspect d71afd1620e5 | grep IPAddress Jul 22 08:42:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2037 pgloader mysql://passbolt:P4ssb0lt@172.25.0.2:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:45:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2038 psql -h 10.53.208.3 Jul 22 08:45:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1995 docker exec -it 0db9c33e2a4a bash Jul 22 08:45:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1996 ls Jul 22 08:45:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1996 ls Jul 22 08:45:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1996 ls Jul 22 08:45:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1997 docker cp 0db9c33e2a4a:/etc/php/8.2/fpm/php.ini php.ini Jul 22 08:45:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1997 docker cp 0db9c33e2a4a:/etc/php/8.2/fpm/php.ini php.ini Jul 22 08:46:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2039 psql -h 10.53.208.3 -U passbolt Jul 22 08:46:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1998 vi php.ini Jul 22 08:46:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2040 psql -h 10.53.208.3 -U passbolt -d passbolt Jul 22 08:47:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1999 vi docker-compose-ce.yaml Jul 22 08:47:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 1999 vi docker-compose-ce.yaml Jul 22 08:47:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2000 ls Jul 22 08:47:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2000 ls Jul 22 08:47:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2001 docker compose down Jul 22 08:47:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2001 docker compose down Jul 22 08:47:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2001 docker compose down Jul 22 08:47:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2001 docker compose down Jul 22 08:48:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2002 mv docker-compose-ce.yaml docker-compose.yml Jul 22 08:48:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2003 docker compose down Jul 22 08:48:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2004 docker compose up Jul 22 08:48:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2005 vi php.ini Jul 22 08:48:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2006 vi docker-compose.yml Jul 22 08:48:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2006 vi docker-compose.yml Jul 22 08:48:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2007 ls Jul 22 08:49:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2007 ls Jul 22 08:49:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2008 docker compose up -d Jul 22 08:50:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2040 psql -h 10.53.208.3 -U passbolt -d passbolt Jul 22 08:50:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2041 pgloader --debug mysql://passbolt:P4ssb0lt@172.25.0.2:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:50:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2042 pgloader mysql://passbolt:P4ssb0lt@172.25.0.2:3306/passbolt postgresql://passbolt:P4ssb0lt@10.53.208.3:5432/passbolt Jul 22 08:54:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [919521]: 2043 psql -h 10.53.208.3 -U passbolt -d passbolt Jul 22 08:59:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1043694]: 1984 psql -h 10.53.208.3 -U passbolt -d passbolt Jul 22 08:59:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1043694]: 1984 psql -h 10.53.208.3 -U passbolt -d passbolt Jul 22 08:59:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2008 docker compose up -d Jul 22 08:59:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1024898]: 2009 ls Jul 22 09:41:42 internal-jumper-server LinuxCommandsWazuh: User venky [1071750]: 122 byobu Jul 22 09:41:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1071823]: 1984 make env Jul 22 09:42:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1984 make env Jul 22 09:42:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1985 ll Jul 22 09:42:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1986 cd Jul 22 09:42:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1987 git status Jul 22 09:42:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1988 cd Nitrox/ Jul 22 09:42:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1989 git status Jul 22 09:42:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1989 git status Jul 22 09:42:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1990 ll Jul 22 09:42:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1991 cd actions-runner/ Jul 22 09:42:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1992 ll Jul 22 09:42:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1993 cd ../ Jul 22 09:42:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1993 cd ../ Jul 22 09:42:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1994 cd nitro Jul 22 09:42:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1995 cd nitrox Jul 22 09:42:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1996 ll Jul 22 09:43:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1072464]: 1996 ll Jul 22 09:59:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1984 make env Jul 22 09:59:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1985 cd passbolt/ Jul 22 09:59:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1986 ls Jul 22 10:00:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1987 sudo vi docker-compose.yml Jul 22 10:00:27 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1987 sudo vi docker-compose.yml Jul 22 10:00:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1987 sudo vi docker-compose.yml Jul 22 10:01:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1988 docker compose up Jul 22 10:01:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1989 docker compose up -d Jul 22 10:01:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1990 docker ps Jul 22 10:02:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1991 docker logs -f 7cf04c9a6f2d Jul 22 10:03:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1992 sudo vi docker-compose Jul 22 10:03:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1993 sudo vi docker-compose.yml Jul 22 10:03:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1994 docker compose down Jul 22 10:03:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1995 docker compose up -d Jul 22 10:03:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1996 docker ps Jul 22 10:05:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1984 make env Jul 22 10:05:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1985 cd passbolt/ Jul 22 10:05:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1986 ls Jul 22 10:06:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1987 sudo vi docker-compose.yml Jul 22 10:06:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1997 docker logs -f b26193e071ef Jul 22 10:06:58 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [1100887]: 1997 docker logs -f b26193e071ef] Jul 22 10:11:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1988 docker compose up Jul 22 10:11:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1989 sudo vi docker-compose. Jul 22 10:11:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1990 sudo vi docker-compose.yml Jul 22 10:12:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1990 sudo vi docker-compose.yml Jul 22 10:12:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1991 ks Jul 22 10:12:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1992 ls Jul 22 10:12:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1997 docker logs -f b26193e071ef Jul 22 10:12:40 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1100887]: 1997 docker logs -f b26193e071ef] Jul 22 10:12:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1100887]: 1998 sudo vi docker-compose.yml Jul 22 10:14:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1992 ls Jul 22 10:14:39 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1111890]: 1992 ls] Jul 22 10:14:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1993 docker ps Jul 22 10:16:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1993 docker ps Jul 22 10:16:59 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [1111890]: 1993 docker ps] Jul 22 10:22:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1994 docker run -d -p 3002:3000 -e "MB_DB_TYPE=postgres" -e "MB_DB_DBNAME=metabaseappdb" -e "MB_DB_PORT=5432" -e "MB_DB_USER=postgres" -e "MB_DB_PASS=merasql" -e "MB_DB_HOST=10.53.208.3" --name metabase metabase/metabase Jul 22 10:22:12 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1111890]: 1994 docker run -d -p 3002:3000 -e "MB_DB_TYPE=postgres" -e "MB_DB_DBNAME=metabaseappdb" -e "MB_DB_PORT=5432" -e "MB_DB_USER=postgres" -e "MB_DB_PASS=merasql" -e "MB_DB_HOST=10.53.208.3" --name metabase metabase/metabase] Jul 22 10:23:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1984 docker compose up Jul 22 10:23:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1985 docker ps Jul 22 10:23:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1986 ssh -p 12222 "devops@10.190.0.6#012" Jul 22 10:23:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1987 ssh -p 12222 "devops@10.190.0.6" Jul 22 10:23:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1988 cd .ssh/ Jul 22 10:23:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1989 ls Jul 22 10:24:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1141516]: 1990 sudo vi id_rsa.pub Jul 22 10:25:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1144827]: 1984 ssh -p 12222 "devops@10.190.0.6" Jul 22 10:28:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1995 sudo vi backup.sh Jul 22 10:28:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1996 sudo chmod +x backup.sh Jul 22 10:28:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1997 ./backup.sh Jul 22 10:28:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1998 sudo chmod +x backup.sh Jul 22 10:29:41 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 1999 sudo vi backup.sh Jul 22 10:29:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2000 ./backup.sh Jul 22 10:30:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2001 pwd Jul 22 10:31:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2002 crontab -e Jul 22 11:45:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2002 crontab -e Jul 22 11:45:07 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [1111890]: 2002 crontab -e] Jul 22 11:45:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2003 k get pods Jul 22 11:45:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2004 k logs -f deployments/nitrox-ui-786cfdbc49-gkmpg Jul 22 11:45:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2005 k logs -f deployments/nitrox-ui Jul 22 11:45:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2005 k logs -f deployments/nitrox-ui Jul 22 11:45:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2006 k get pods Jul 22 11:46:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2007 k logs -f deployments/nitrox-ui Jul 22 11:46:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2007 k logs -f deployments/nitrox-ui Jul 22 11:47:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2007 k logs -f deployments/nitrox-ui Jul 22 11:52:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2008 ls Jul 22 12:00:50 internal-jumper-server LinuxCommandsWazuh: User venky [1303370]: 122 byobu Jul 22 12:06:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2008 ls Jul 22 12:06:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2009 k exec -it deployments/nitrox-ui bash Jul 22 12:06:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2010 k exec --it deployments/nitrox-ui bash Jul 22 12:06:26 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2011 k exec -it deployments/nitrox-ui -- bash Jul 22 12:09:53 internal-jumper-server LinuxCommandsWazuh: User venky [1303370]: 123 kubetail nitrox-dj-6d64b59748-5l6zb Jul 22 12:10:39 internal-jumper-server LinuxCommandsWazuh: User venky [1303370]: 124 curl -o https://svc.nitrocommerce.ai/v1/services/stats Jul 22 12:10:56 internal-jumper-server LinuxCommandsWazuh: User venky [1303370]: 125 curl -0 https://svc.nitrocommerce.ai/v1/services/stats Jul 22 12:13:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2012 k exec -it deployments/nitrox-ui -- sh Jul 22 12:14:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1984 ssh -p 12222 "devops@10.190.0.6" Jul 22 12:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1985 cd pa Jul 22 12:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1144827]: 1984 ssh -p 12222 "devops@10.190.0.6" Jul 22 12:14:10 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [1144827]: 1984 ssh -p 12222 "devops@10.190.0.6"] Jul 22 12:14:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1986 cd passbolt/ Jul 22 12:14:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1144827]: 1985 ls Jul 22 12:14:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1987 ls Jul 22 12:14:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1144827]: 1986 cd passbolt/ Jul 22 12:14:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1144827]: 1987 ls Jul 22 12:14:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2013 curl -o test.csv "https://svc.nitrocommerce.ai/v1/services/stats" Jul 22 12:14:38 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1111890]: 2013 curl -o test.csv "https://svc.nitrocommerce.ai/v1/services/stats"] Jul 22 12:14:41 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2014 ls Jul 22 12:14:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2015 cat test.csv Jul 22 12:15:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2016 curl -v "https://svc.nitrocommerce.ai/v1/services/tt" Jul 22 12:16:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2017 curl -v "https://svc.nitrocommerce.ai/v1/services/stats" Jul 22 12:17:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2017 curl -v "https://svc.nitrocommerce.ai/v1/services/stats" Jul 22 12:17:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2017 curl -v "https://svc.nitrocommerce.ai/v1/services/stats" Jul 22 12:17:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2018 cd Jul 22 12:17:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2019 ls Jul 22 12:35:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2020 k exec -it deployments/nitrox-dj -- bash Jul 22 12:36:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2021 k cp default/nitrox-dj-6d64b59748-5l6zb:/app/test.csv . Jul 22 12:36:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2022 k cp default/nitrox-dj-6d64b59748-5l6zb:app/test.csv . Jul 22 12:37:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2023 k cp default/nitrox-dj-6d64b59748-5l6zb:app/test.csv /home/ubuntu/ Jul 22 12:37:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2024 kubectl get pods -n default Jul 22 12:38:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2025 kubectl exec -it nitrox-dj-6d64b59748-5l6zb -n default -- /bin/sh Jul 22 12:38:29 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2026 kubectl cp default/nitrox-dj-6d64b59748-5l6zb:/app/test.csv /home/ubuntu/ Jul 22 12:38:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2026 kubectl cp default/nitrox-dj-6d64b59748-5l6zb:/app/test.csv /home/ubuntu/ Jul 22 12:38:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2027 touch expost.csv Jul 22 12:38:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2028 kubectl cp default/nitrox-dj-6d64b59748-5l6zb:/app/test.csv /home/ubuntu/ Jul 22 12:38:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2029 kubectl cp default/nitrox-dj-6d64b59748-5l6zb:/app/test.csv /home/ubuntu/expost.csv Jul 22 12:38:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2030 ls Jul 22 12:38:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2031 cat expost.csv Jul 22 12:39:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2031 cat expost.csv Jul 22 12:39:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1111890]: 2031 cat expost.csv Jul 22 12:57:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1988 vi php.ini Jul 22 12:57:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1988 vi php.ini Jul 22 12:57:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1333841]: 1989 ls Jul 22 13:59:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1071823]: 1985 byobu