Aug 4 06:59:45 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 126 sudo su ubuntu Aug 4 06:59:50 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 127 ls Aug 4 06:59:55 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 128 docker ps Aug 4 07:03:53 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 129 docker logs -f 5888733ec1fa Aug 4 07:10:16 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 130 docker exec -it 5888733ec1fa bash Aug 4 07:10:19 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 131 docker ps Aug 4 07:10:42 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 132 docker logs -f 992f939c63c6 Aug 4 07:10:56 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 133 docker stop 992f939c63c6 Aug 4 07:12:13 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 133 docker stop 992f939c63c6 Aug 4 07:20:08 internal-jumper-server LinuxCommandsWazuh: User anshika [1444922]: 134 docker rm 992f939c63c6 Aug 4 07:20:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1982 sudo vi pages-bagline.conf Aug 4 07:20:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1983 cd Aug 4 07:20:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1984 ls Aug 4 07:20:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1985 cd aishopper/ Aug 4 07:20:18 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1986 ls Aug 4 07:20:20 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1987 make up Aug 4 07:20:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1988 docker ps Aug 4 07:42:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1459445]: 1989 docker logs -f 44c3ab246852 Aug 4 07:46:03 internal-jumper-server LinuxCommandsWazuh: User anshika [1476442]: 135 sudo su ubuntu Aug 4 07:46:07 internal-jumper-server LinuxCommandsWazuh: User anshika [1476442]: 136 docker ps Aug 4 08:22:13 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 137 docker logs -f 44c3ab246852 Aug 4 08:22:59 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 138 mongo Aug 4 08:51:19 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 138 mongo Aug 4 08:51:20 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User anshika [1500816]: 138 mongo] Aug 4 08:51:22 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 139 dockerr ps Aug 4 08:51:25 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 140 docker ps Aug 4 08:51:34 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 141 docker logs -f 5888733ec1fa Aug 4 08:51:35 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 142 ls Aug 4 08:51:56 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 143 kubectl logs -f deployments/pages Aug 4 08:52:35 internal-jumper-server LinuxCommandsWazuh: User anshika [1500816]: 143 kubectl logs -f deployments/pages Aug 4 08:52:36 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User anshika [1500816]: 143 kubectl logs -f deployments/pages ] Aug 4 08:52:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1982 docker logs -f 44c3ab246852 Aug 4 08:52:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1983 cd /etc/nginx/sites-enabled/ Aug 4 08:53:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1984 sudo vi pages-bagline.conf Aug 4 08:53:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1985 sudo nginx -t Aug 4 08:53:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1986 sudo systemctl reload nginx.service Aug 4 09:11:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1987 cd .. Aug 4 09:11:25 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1988 cd Aug 4 09:11:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1989 docker ps Aug 4 09:14:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1990 docker logs -f 5888733ec1fa Aug 4 09:17:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1990 docker logs -f 5888733ec1fa Aug 4 09:17:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1991 curl -I https://retail.bagline.com/39 Aug 4 10:26:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1522477]: 1992 docker logs -f 5888733ec1fa Aug 4 13:56:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1982 docker logs -f 5888733ec1fa Aug 4 13:56:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1983 aux Aug 4 13:57:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1984 sudo netstat -nlp Aug 4 13:58:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1984 sudo netstat -nlp Aug 4 13:58:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1985 cd /etc/nginx/ Aug 4 13:58:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1986 ls Aug 4 13:58:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1987 cd tcp-enabled/ Aug 4 13:58:16 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1988 ls Aug 4 13:58:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1989 cat backup.conf Aug 4 13:58:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1990 curl 10.8.0.2:32 Aug 4 13:58:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1991 curl 10.8.0.2 Aug 4 13:58:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1992 curl -I 10.8.0.2 Aug 4 13:59:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1993 curl 10.8.0.2:22 Aug 4 14:02:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1994 nc -zv 10.8.0.3 22 Aug 4 14:02:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1995 ssh -vvv devops@10.8.0.2 Aug 4 14:02:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1996 ssh -p 12222 "devops@10.190.0.6" Aug 4 14:03:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1996 ssh -p 12222 "devops@10.190.0.6" Aug 4 14:03:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1997 curl -v telnet://10.8.0.3:22 Aug 4 14:07:27 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1998 ls Aug 4 14:07:30 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 1999 cd .. Aug 4 14:07:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 2000 ls Aug 4 14:07:39 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 2001 cd sites-enabled/ Aug 4 14:07:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 2002 ls Aug 4 14:07:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 2003 cat pre-prod.conf Aug 4 14:07:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [1735025]: 2003 cat pre-prod.conf