Aug 5 06:32:55 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2399184]: 1982 cat pre-prod.conf Aug 5 07:17:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1982 cat pre-prod.conf Aug 5 07:17:02 internal-jumper-server LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [2431763]: 1982 cat pre-prod.conf ] Aug 5 07:17:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1983 ls Aug 5 07:17:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1984 cd /etc/nginx/sites-enabled/ Aug 5 07:17:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1985 ls Aug 5 07:17:10 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1986 cd .. Aug 5 07:17:11 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1987 ls Aug 5 07:17:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1988 cd tcp-enabled/ Aug 5 07:17:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1989 ls Aug 5 07:17:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1990 sudo vi backup.conf Aug 5 07:17:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1991 sudo nginx -t Aug 5 07:17:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1992 sudo systemctl reload nginx.service Aug 5 07:24:47 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1993 sudo vi backup.conf Aug 5 07:24:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1994 sudo systemctl reload nginx.service Aug 5 07:24:54 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1615 exit Aug 5 07:24:55 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1616 ls Aug 5 07:24:55 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1617 cd Aug 5 07:24:55 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1618 ls Aug 5 07:25:06 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1619 byobu Aug 5 07:25:14 internal-jumper-server LinuxCommandsWazuh: User ak [2438751]: 1619 byobu Aug 5 07:59:31 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1995 sudo su ak Aug 5 07:59:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1996 cd Aug 5 07:59:32 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1997 ls Aug 5 07:59:40 internal-jumper-server LinuxCommandsWazuh: User ubuntu [974491]: 1987 kubetail nitrox-dj Aug 5 08:00:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2464401]: 1982 ll Aug 5 08:01:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1998 byobu Aug 5 08:01:34 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1998 byobu Aug 5 08:01:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2431763]: 1999 ssh -p 12222 "devops@10.190.0.6" Aug 5 08:16:08 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1982 exit Aug 5 08:16:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1983 ls Aug 5 08:16:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1984 cd /etc/nginx/sites-enabled/ Aug 5 08:16:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1985 cd .. Aug 5 08:16:15 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1986 ls Aug 5 08:16:17 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1987 cd tcp-enabled/ Aug 5 08:16:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2475729]: 1988 cat backup.conf Aug 5 08:17:54 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2477042]: 1982 exit Aug 5 08:18:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2477042]: 1983 ssh -L 12222:10.8.0.3:22 devops@34.131.11.23 Aug 5 08:19:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2477042]: 1983 ssh -L 12222:10.8.0.3:22 devops@34.131.11.23 Aug 5 08:28:29 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2477042]: 1983 ssh -L 12222:10.8.0.3:22 devops@34.131.11.23 Aug 5 08:28:30 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2477042]: 1983 ssh -L 12222:10.8.0.3:22 devops@34.131.11.23] Aug 5 09:16:21 internal-jumper-server LinuxCommandsWazuh: User venky [2518588]: 144 sudo su - ubuntu Aug 5 09:16:26 internal-jumper-server LinuxCommandsWazuh: User venky [2518588]: 144 sudo su - ubuntu Aug 5 09:16:28 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User venky [2518588]: 144 sudo su - ubuntu] Aug 5 09:16:32 internal-jumper-server LinuxCommandsWazuh: User venky [2518588]: 144 sudo su - ubuntu Aug 5 09:16:32 internal-jumper-server LinuxCommandsWazuh: User venky [2518588]: 144 sudo su - ubuntu Aug 5 09:16:38 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2518769]: 1982 exit Aug 5 09:16:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2518769]: 1982 exit Aug 5 09:16:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2518769]: 1982 exit Aug 5 09:16:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2518769]: 1982 exit Aug 5 09:17:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1982 exit Aug 5 09:17:23 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1983 cd Aug 5 09:17:36 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1984 ll Aug 5 09:17:42 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1984 ll Aug 5 09:17:42 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2519959]: 1984 ll] Aug 5 09:17:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1985 docker ps Aug 5 09:17:51 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1985 docker ps Aug 5 09:21:16 internal-jumper-server LinuxCommandsWazuh: User venky [2526970]: 144 sudo su - ubuntu Aug 5 09:21:17 internal-jumper-server LinuxCommandsWazuh: User venky [2526970]: 145 ll Aug 5 09:21:23 internal-jumper-server LinuxCommandsWazuh: User venky [2526970]: 145 ll Aug 5 09:21:24 internal-jumper-server LinuxCommandsWazuh: message repeated 6 times: [ User venky [2526970]: 145 ll] Aug 5 09:21:24 internal-jumper-server LinuxCommandsWazuh: User venky [2526970]: 145 ll Aug 5 09:31:35 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2518769]: 1983 byobu Aug 5 09:55:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1982 byobu Aug 5 09:55:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1983 ls Aug 5 09:55:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1984 cd toilet/ Aug 5 09:55:04 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1985 ls Aug 5 09:55:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1986 cat log.sh Aug 5 10:01:26 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1987 ls Aug 5 10:01:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2558937]: 1988 cat service.json Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1986 docker logs -f aishopper Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: message repeated 7 times: [ User ubuntu [2519959]: 1986 docker logs -f aishopper] Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1986 docker logs -f aishopper Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1986 docker logs -f aishopper Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1986 docker logs -f aishopper Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [2519959]: 1986 docker logs -f aishopper] Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2519959]: 1986 docker logs -f aishopper Aug 5 10:14:09 internal-jumper-server LinuxCommandsWazuh: message repeated 9 times: [ User ubuntu [2519959]: 1986 docker logs -f aishopper] Aug 5 10:50:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1982 byobu Aug 5 10:50:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1983 ls Aug 5 10:50:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1984 cd /etc/nginx/sites-enabled/ Aug 5 10:50:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1985 ls Aug 5 10:50:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1985 ls Aug 5 10:52:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1986 vi pages-bagline.conf Aug 5 10:53:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1986 vi pages-bagline.conf Aug 5 10:53:02 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1986 vi pages-bagline.conf Aug 5 10:54:12 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1986 vi pages-bagline.conf Aug 5 10:55:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1986 vi pages-bagline.conf Aug 5 10:55:07 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1987 cat pages-bagline.conf Aug 5 11:19:19 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1982 cat service.json Aug 5 11:19:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1983 cd aishopper/ Aug 5 11:19:21 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1984 ls Aug 5 11:19:28 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1985 docker ps Aug 5 11:19:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1986 docker logs -f 403bf0d3e27c Aug 5 11:19:48 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1987 make bash Aug 5 11:19:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1987 make bash Aug 5 11:19:58 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1988 ;s Aug 5 11:19:59 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1989 ls Aug 5 11:20:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1990 cd . Aug 5 11:20:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1991 ls Aug 5 11:20:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1992 cat bin/entrypoint.sh Aug 5 11:21:39 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 11:22:49 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1987 cat pages-bagline.conf Aug 5 11:22:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1988 cd Aug 5 11:22:50 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1989 ls Aug 5 11:22:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2602547]: 1989 ls Aug 5 11:24:37 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1993 make bash Aug 5 11:24:37 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 11:24:38 internal-jumper-server LinuxCommandsWazuh: message repeated 6 times: [ User shobhit [2627315]: 73 docker logs -f aishopper] Aug 5 11:33:55 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 11:33:55 internal-jumper-server LinuxCommandsWazuh: message repeated 9 times: [ User shobhit [2627315]: 73 docker logs -f aishopper] Aug 5 11:38:34 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 11:38:34 internal-jumper-server LinuxCommandsWazuh: message repeated 12 times: [ User shobhit [2627315]: 73 docker logs -f aishopper] Aug 5 11:41:18 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 11:41:18 internal-jumper-server LinuxCommandsWazuh: message repeated 4 times: [ User shobhit [2627315]: 73 docker logs -f aishopper] Aug 5 11:59:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1993 make bash Aug 5 11:59:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1993 make bash Aug 5 11:59:43 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1993 make bash Aug 5 11:59:45 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1994 cd Aug 5 11:59:46 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1995 ls Aug 5 11:59:56 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1996 cd passbolt/ Aug 5 11:59:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1997 ls Aug 5 12:00:00 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper Aug 5 12:03:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1997 ls Aug 5 12:03:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1997 ls Aug 5 12:03:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1997 ls Aug 5 12:27:52 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1997 ls Aug 5 12:27:53 internal-jumper-server LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2624739]: 1997 ls] Aug 5 12:27:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1998 cd Aug 5 12:27:53 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1999 ls Aug 5 12:27:57 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 1999 ls Aug 5 12:28:00 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2000 cd wiki/ Aug 5 12:28:01 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2001 ls Aug 5 12:28:03 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2001 ls Aug 5 12:28:05 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2002 cat docker-compose.yml Aug 5 12:28:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2003 ls Aug 5 12:28:13 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2003 ls Aug 5 12:28:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2004 cd .. Aug 5 12:28:14 internal-jumper-server LinuxCommandsWazuh: User ubuntu [2624739]: 2005 ls Aug 5 12:44:52 internal-jumper-server LinuxCommandsWazuh: User shobhit [2627315]: 73 docker logs -f aishopper