Aug 26 06:24:21 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 84 docker logs -f aishopper Aug 26 07:27:00 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 84 docker logs -f aishopper Aug 26 07:27:06 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 85 docker ps Aug 26 07:37:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1226035]: 1997 sudo su ak Aug 26 07:38:26 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1055467]: 1988 Kubectl describe configmap sso-config Aug 26 07:38:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1055467]: 1989 cd Aug 26 07:38:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1055467]: 1990 Kubectl describe configmap sso-config Aug 26 07:39:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1231151]: 1997 sudo su ak Aug 26 07:39:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1231151]: 1998 Kubectl describe configmap sso-config Aug 26 07:57:29 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 85 docker ps Aug 26 08:27:09 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 86 docker logs -f aishopper Aug 26 08:27:17 internal-jumper-server LinuxCommandsWazuh: User shobhit [1125448]: 87 mongo datalake Aug 26 08:31:47 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 87 mongo datalake Aug 26 08:34:32 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 88 docker logs -f aishopper Aug 26 08:34:32 internal-jumper-server LinuxCommandsWazuh: message repeated 13 times: [ User shobhit [1348574]: 88 docker logs -f aishopper] Aug 26 08:35:51 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 88 docker logs -f aishopper Aug 26 08:35:51 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User shobhit [1348574]: 88 docker logs -f aishopper] Aug 26 08:38:17 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 88 docker logs -f aishopper Aug 26 08:39:39 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 88 docker logs -f aishopper Aug 26 08:52:09 internal-jumper-server LinuxCommandsWazuh: User shobhit [1348574]: 88 docker logs -f aishopper Aug 26 09:34:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1231151]: 1999 k get all Aug 26 09:34:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1231151]: 2000 k describe configmap sso-config Aug 26 09:55:59 internal-jumper-server LinuxCommandsWazuh: User shobhit [1550965]: 88 docker logs -f aishopper Aug 26 09:58:31 internal-jumper-server LinuxCommandsWazuh: User shobhit [1550965]: 88 docker logs -f aishopper Aug 26 09:58:31 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User shobhit [1550965]: 88 docker logs -f aishopper] Aug 26 10:23:01 internal-jumper-server LinuxCommandsWazuh: User shobhit [1550965]: 88 docker logs -f aishopper Aug 26 11:21:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1742869]: 1997 sudo su ak Aug 26 11:21:27 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1742869]: 1997 sudo su ak Aug 26 11:21:28 internal-jumper-server LinuxCommandsWazuh: message repeated 7 times: [ User ubuntu [1742869]: 1997 sudo su ak] Aug 26 11:21:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1742869]: 1998 cd /etc/nginx/sites-enabled/ Aug 26 11:21:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1742869]: 1999 ;ls Aug 26 11:21:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1742869]: 2000 ls Aug 26 11:22:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 1997 sudo vi stage.conf Aug 26 11:22:58 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [1747288]: 1997 sudo vi stage.conf ] Aug 26 11:23:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 1998 cd /etc/nginx/sites-enabled/ Aug 26 11:24:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 1999 sudo vi stage.conf Aug 26 11:24:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 1999 sudo vi stage.conf Aug 26 11:25:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 2000 sudo nginx -t Aug 26 11:25:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1747288]: 2001 sudo systemctl reload nginx.service Aug 26 11:27:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1758245]: 1997 sudo vi stage.conf Aug 26 11:27:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1758245]: 1998 k get pods Aug 26 11:28:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1758245]: 1999 k delete deployments.apps cookie-cutter Aug 26 11:28:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1758245]: 2000 k delete svc cookie-cutter Aug 26 11:33:44 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1772690]: 1997 k delete svc cookie-cutter Aug 26 11:33:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1772690]: 1998 cd /var/log/nginx/ Aug 26 11:33:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1772690]: 1999 ls Aug 26 11:46:34 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 11:54:34 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 11:54:34 internal-jumper-server LinuxCommandsWazuh: message repeated 13 times: [ User shobhit [1800053]: 88 docker logs -f aishopper] Aug 26 11:57:02 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 11:57:02 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User shobhit [1800053]: 88 docker logs -f aishopper] Aug 26 12:05:33 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 12:05:33 internal-jumper-server LinuxCommandsWazuh: message repeated 19 times: [ User shobhit [1800053]: 88 docker logs -f aishopper] Aug 26 12:20:19 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 12:20:19 internal-jumper-server LinuxCommandsWazuh: message repeated 17 times: [ User shobhit [1800053]: 88 docker logs -f aishopper] Aug 26 12:22:01 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 12:31:02 internal-jumper-server LinuxCommandsWazuh: User shobhit [1800053]: 88 docker logs -f aishopper Aug 26 12:31:02 internal-jumper-server LinuxCommandsWazuh: message repeated 11 times: [ User shobhit [1800053]: 88 docker logs -f aishopper] Aug 26 12:33:45 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1911469]: 215 sudo su ubuntu Aug 26 12:33:45 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1911469]: 216 ls Aug 26 12:33:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 1997 tail -f -n 10 error.log Aug 26 12:33:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 1998 cdl Aug 26 12:33:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 1999 cd Aug 26 12:33:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2000 ls Aug 26 12:33:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2001 cd toilet/ Aug 26 12:33:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2002 ls Aug 26 12:34:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2002 ls Aug 26 12:34:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2003 cd Aug 26 12:34:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2004 cd vpn/ Aug 26 12:34:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2005 ls Aug 26 12:34:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2006 ./openvpn-install.sh Aug 26 12:34:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2007 sudo ./openvpn-install.sh Aug 26 12:34:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2008 cp /root/busybox.ovpn /tmp/ Aug 26 12:34:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2009 sudo cp /root/busybox.ovpn /tmp/ Aug 26 12:34:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2010 sudo a+r /tmp/busybox.ovpn Aug 26 12:34:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2011 sudo chmod a+r /tmp/busybox.ovpn Aug 26 12:34:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2011 sudo chmod a+r /tmp/busybox.ovpn Aug 26 12:34:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2012 ls Aug 26 12:34:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2013 sudo cp /tmp/busybox.ovpn . Aug 26 12:34:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2014 pwd Aug 26 12:35:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2015 cat busybox.ovpn Aug 26 12:35:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2015 cat busybox.ovpn Aug 26 12:35:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2016 cd /etc/openvpn/ Aug 26 12:35:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2017 ls Aug 26 12:35:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2017 ls Aug 26 12:35:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2018 cd server/ Aug 26 12:35:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2019 sudo vi ipp.txt Aug 26 12:35:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2019 sudo vi ipp.txt Aug 26 12:35:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2020 sudo systemctl reload openvpn Aug 26 12:36:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2021 sudo systemctl restart openvpn Aug 26 12:36:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2022 sudo systemctl restart openvpn-server@server.service Aug 26 12:36:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1911577]: 2023 sudo systemctl restart openvpn.service Aug 26 12:40:14 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1926316]: 217 sudo su ubuntu Aug 26 12:40:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 1997 sudo systemctl restart openvpn.service Aug 26 12:40:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 1998 cd Aug 26 12:40:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 1999 ls Aug 26 12:40:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2000 mv rihan2.ovpn toilet/ Aug 26 12:40:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2000 mv rihan2.ovpn toilet/ Aug 26 12:40:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2001 ls Aug 26 12:40:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2001 ls Aug 26 12:40:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2001 ls Aug 26 12:40:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2002 cd /etc/nginx/sites-enabled/ Aug 26 12:40:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2003 ls Aug 26 12:40:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2004 sudo cp shamail.conf busybox-shamail.conf Aug 26 12:40:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2005 sudo vo busybox-shamail.conf Aug 26 12:42:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2006 sudo vi busybox-shamail.conf Aug 26 12:42:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2007 cd Aug 26 12:42:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2007 cd Aug 26 12:42:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2007 cd Aug 26 12:43:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2007 cd Aug 26 12:43:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2008 ls Aug 26 12:43:24 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2009 sudo vi busybox-shamail.conf Aug 26 12:43:29 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2009 sudo vi busybox-shamail.conf Aug 26 12:43:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2009 sudo vi busybox-shamail.conf Aug 26 12:44:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2010 git clone git@github.com:pleomax00/python-vim-setttings.git .vim Aug 26 12:44:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2011 ls .vim -a Aug 26 12:44:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2012 rm .vim -r Aug 26 12:44:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2013 git clone git@github.com:pleomax00/python-vim-setttings.git .vim Aug 26 12:44:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2014 ln -s .vim/vimrc .vimrc Aug 26 12:44:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2015 ls Aug 26 12:44:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2016 cd - Aug 26 12:44:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2017 ln -s .vim/vimrc .vimrc Aug 26 12:44:33 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2018 ls Aug 26 12:45:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2019 vi busybox-shamail.conf Aug 26 12:45:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2020 sudo vi busybox-shamail.conf Aug 26 12:49:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2020 sudo vi busybox-shamail.conf Aug 26 12:49:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2021 ls Aug 26 12:49:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2022 sudo vi busybox-shamail.conf Aug 26 12:49:22 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2022 sudo vi busybox-shamail.conf Aug 26 12:49:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2023 sudo systemctl restart nginx.service Aug 26 12:49:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2024 sudo vi busybox-shamail.conf Aug 26 12:49:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2025 ls Aug 26 12:49:50 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1926455]: 2025 ls] Aug 26 12:49:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2025 ls Aug 26 12:50:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2026 sudo certbot --nginx -d busybox.getnitro.co.in Aug 26 12:50:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2027 sudo vi busybox-shamail.conf Aug 26 12:51:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2028 sudo certbot --nginx -d busybox-bkend.getnitro.co.in Aug 26 12:51:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2029 sudo certbot --nginx -d busybox-wizke.getnitro.co.in Aug 26 13:43:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1926455]: 2029 sudo certbot --nginx -d busybox-wizke.getnitro.co.in Aug 26 13:43:17 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [1926316]: 217 sudo su ubuntu Aug 26 13:47:48 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [2070763]: 217 sudo su ubuntu Aug 26 13:47:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2070827]: 1997 sudo certbot --nginx -d busybox-wizke.getnitro.co.in Aug 26 13:47:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2070827]: 1998 cd Aug 26 13:47:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2070827]: 1999 cd /etc/nginx/sites-enabled/ Aug 26 13:48:06 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2070827]: 2000 sudo vi busybox-shamail.conf Aug 26 13:48:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2070827]: 2000 sudo vi busybox-shamail.conf Aug 26 13:48:16 internal-jumper-server LinuxCommandsWazuh: User shamailtayyab [2070763]: 217 sudo su ubuntu