Jul 31 06:28:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1984 ls Jul 31 06:28:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1985 cd Jul 31 06:28:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1986 ls Jul 31 06:28:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1987 cd aishopper/ Jul 31 06:28:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1988 ls Jul 31 06:28:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1989 cat .env Jul 31 06:33:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1989 cat .env Jul 31 06:33:39 internal-jumper-server LinuxCommandsWazuh: message repeated 5 times: [ User ubuntu [1663550]: 1989 cat .env] Jul 31 06:33:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1990 cd Jul 31 06:33:41 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1991 ls Jul 31 06:41:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1991 ls Jul 31 06:41:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1991 ls Jul 31 06:41:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1992 ;s Jul 31 06:41:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1993 ls Jul 31 06:42:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1993 ls Jul 31 06:42:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1993 ls Jul 31 06:43:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1994 cd .. Jul 31 06:43:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1995 ls Jul 31 06:43:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1996 sudo su shamailtayyab/ Jul 31 06:43:14 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 163 exit Jul 31 06:43:14 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 164 l Jul 31 06:43:15 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 165 cd Jul 31 06:43:16 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 166 ls Jul 31 06:43:18 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 167 docker ps Jul 31 06:43:25 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 168 kubectl get all Jul 31 06:43:32 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 169 psql Jul 31 07:15:25 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 169 psql Jul 31 07:15:25 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [1675275]: 169 psql ] Jul 31 07:15:26 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 170 ls Jul 31 07:15:27 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 171 cd red Jul 31 07:15:30 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [1675275]: 171 cd red] Jul 31 07:15:31 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1675275]: 172 ls Jul 31 07:15:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1997 sudo su shamailtayyab Jul 31 07:15:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1998 ls Jul 31 07:15:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 1999 cd Jul 31 07:34:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2000 ls Jul 31 07:34:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2001 cd Jul 31 07:34:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2002 ls Jul 31 07:36:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2003 cd redmine/ Jul 31 07:36:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2004 ls Jul 31 07:36:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2005 cd plugins/ Jul 31 07:36:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2006 ls Jul 31 07:36:27 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2007 cd redmine_ Jul 31 07:36:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2008 cd redmine_slack/ Jul 31 07:36:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2009 ls Jul 31 07:36:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2010 cat README.md Jul 31 07:37:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2011 bundle install Jul 31 07:37:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2012 docker ps Jul 31 07:37:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2013 docker exec -it 439f0b471242 Jul 31 07:56:59 internal-jumper-server LinuxCommandsWazuh: User devesh [1729218]: 85 docker ps -a | grep mongo Jul 31 07:57:09 internal-jumper-server LinuxCommandsWazuh: User devesh [1729218]: 86 kubectl get pdos Jul 31 07:57:12 internal-jumper-server LinuxCommandsWazuh: User devesh [1729218]: 87 kubectl get pods Jul 31 07:57:20 internal-jumper-server LinuxCommandsWazuh: User devesh [1729218]: 88 kubectl get pods -o wide Jul 31 07:58:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2014 docker exec -it 439f0b471242 bash Jul 31 07:58:18 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 85 docker ps -a | grep mongo Jul 31 07:58:24 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 86 kubectl get pdos Jul 31 07:58:26 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2015 cd Jul 31 07:58:27 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 87 kubectl get pods Jul 31 07:58:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2016 k get pods -o wide Jul 31 07:58:41 internal-jumper-server LinuxCommandsWazuh: User devesh [1730937]: 85 docker ps -a | grep mongo Jul 31 07:58:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2017 curl 10.112.2.46:10100 Jul 31 07:58:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2018 curl http://10.112.2.46:10100 Jul 31 08:00:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2018 curl http://10.112.2.46:10100 Jul 31 08:00:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2019 cd redmine/ Jul 31 08:00:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2020 ls Jul 31 08:01:03 internal-jumper-server LinuxCommandsWazuh: User devesh [1730937]: 85 docker ps -a | grep mongo Jul 31 08:01:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1984 ls Jul 31 08:01:08 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 88 kubectl logs -f nitrox-dj-f89d96d65-k7x5m Jul 31 08:01:08 internal-jumper-server LinuxCommandsWazuh: message repeated 19 times: [ User devesh [1730212]: 88 kubectl logs -f nitrox-dj-f89d96d65-k7x5m] Jul 31 08:01:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1984 ls Jul 31 08:01:12 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 88 kubectl logs -f nitrox-dj-f89d96d65-k7x5m Jul 31 08:01:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1985 cd redmine/plugins/ Jul 31 08:01:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1986 ls Jul 31 08:01:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2021 make build Jul 31 08:01:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1987 cat redmine_slack/ Jul 31 08:01:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1988 cd redmine_ Jul 31 08:01:21 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: 89 kubectl get pods Jul 31 08:01:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1989 cd redmine_slack/ Jul 31 08:01:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1990 ls Jul 31 08:01:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1736207]: 1991 cat README.md Jul 31 08:02:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2022 make run Jul 31 08:02:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2023 make up Jul 31 08:02:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2024 docker ps Jul 31 08:04:15 internal-jumper-server LinuxCommandsWazuh: User devesh [1730937]: 86 curl 'http://10.112.2.46:10100/v1/services/su/sync-integrations' -H 'Accept: application/json, text/plain, */*' -H 'Accept-Language: en-US,en;q=0.9' -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6MSwibmFtZSI6IkQgTCIsImVtYWlsIjoiZGV2ZXNoQGdldG5pdHJvLmNvIiwidXNlcm5hbWUiOiJkZXZlc2hAZ2V0bml0cm8uY28iLCJpc19hY3RpdmUiOnRydWUsInBob25lIjpudWxsLCJpc19lbWFpbF92ZXJpZmllZCI6ZmFsc2UsImlzX3Bob25lX3ZlcmlmaWVkIjpmYWxzZSwiaXNfc3VwZXJ1c2VyIjp0cnVlfQ.E4yJb46ezYU0uruIMVJHTldR6kHhHgKrUVz2LJCW2s0' -H 'Connection: keep-alive' -H 'Origin: https://minion.getnitro.co.in' -H 'Referer: https://minion.getnitro.co.in/' -H 'Sec-Fetch-Dest: empty' -H 'Sec-Fetch-Mode: cors' -H 'Sec-Fetch-Site: same-site' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36' -H 'sec-ch-ua: "Not)A;Brand";v="99", "Google Chrome";v="127", "Chromium";v="127"' -H 'sec-ch-ua-mobile: ?0' -H 'sec-ch-ua-platform: "Linux"' Jul 31 08:05:36 internal-jumper-server LinuxCommandsWazuh: User devesh [1730937]: 87 kubectl get all Jul 31 08:24:29 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2025 docker logs -f 5861ecfd3587 Jul 31 08:24:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2026 ls Jul 31 08:24:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2027 cd Jul 31 08:24:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2028 ls Jul 31 08:24:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1663550]: 2029 cd Jul 31 08:39:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1802680]: 1984 cd Jul 31 08:39:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1802680]: 1985 ls Jul 31 08:39:59 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1600 exit Jul 31 08:39:59 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1601 s Jul 31 08:40:01 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1602 ls Jul 31 08:40:03 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1603 cd Jul 31 08:40:05 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1604 cd .ssh/ Jul 31 08:40:05 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1605 ls Jul 31 08:40:16 internal-jumper-server LinuxCommandsWazuh: User ak [1803020]: 1606 sudo vi authorized_keys Jul 31 08:40:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1802680]: 1986 sudo su ak Jul 31 08:40:27 internal-jumper-server LinuxCommandsWazuh: User devesh [1729218]: 89 byobu Jul 31 08:40:44 internal-jumper-server LinuxCommandsWazuh: User ak [1804069]: 1607 exit Jul 31 08:40:47 internal-jumper-server LinuxCommandsWazuh: User ak [1804069]: 1608 ls Jul 31 08:43:18 internal-jumper-server LinuxCommandsWazuh: User ak [1805712]: 1609 exit Jul 31 08:44:16 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1609 exit Jul 31 08:44:17 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1610 ls Jul 31 08:44:23 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1611 cd Nitrox/ Jul 31 08:44:23 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1612 ls Jul 31 08:44:25 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1613 cat Makefile Jul 31 08:44:39 internal-jumper-server LinuxCommandsWazuh: User ak [1806354]: 1614 make psql Jul 31 09:37:53 internal-jumper-server LinuxCommandsWazuh: User rihan [1843756]: 137 kubectl edit configmap nitrox-dj-config Jul 31 09:38:01 internal-jumper-server LinuxCommandsWazuh: User rihan [1843756]: 138 cd ../ubuntu/Nitrox/ Jul 31 09:38:25 internal-jumper-server LinuxCommandsWazuh: User rihan [1843756]: 139 kubectl edit configmap nitrox-dj-config Jul 31 10:01:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1984 exit Jul 31 10:01:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1985 cd /etc/nginx/sites-enabled/ Jul 31 10:01:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1986 ls Jul 31 10:01:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1987 sudo vi passbolt.conf Jul 31 10:01:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1987 sudo vi passbolt.conf Jul 31 10:01:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1987 sudo vi passbolt.conf Jul 31 10:01:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1987 sudo vi passbolt.conf Jul 31 10:01:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1988 sudo service nginx restart Jul 31 10:02:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1989 sudo vi passbolt.conf Jul 31 10:02:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1990 sudo service nginx restart Jul 31 10:05:01 internal-jumper-server LinuxCommandsWazuh: User devesh [1730937]: 88 kubectl exec -it deployments/nitrox-dj -- bash Jul 31 10:05:01 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh Jul 31 10:05:01 internal-jumper-server LinuxCommandsWazuh: message repeated 10 times: [ User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh] Jul 31 10:05:02 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh Jul 31 10:05:02 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh Jul 31 10:05:02 internal-jumper-server LinuxCommandsWazuh: User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh Jul 31 10:05:02 internal-jumper-server LinuxCommandsWazuh: message repeated 23 times: [ User devesh [1730212]: kubectl logs -f nitrox-dj-84688f47b6-wg6wh] Jul 31 10:09:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1860396]: 1990 sudo service nginx restart Jul 31 10:51:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1895280]: 1984 sudo service nginx restart