Sep 10 07:28:45 bastion LinuxCommandsWazuh: User rihan [1090050]: 178 psql Sep 10 07:53:48 bastion LinuxCommandsWazuh: User ak [1090269]: 119 exit Sep 10 07:54:57 bastion LinuxCommandsWazuh: User ak [1090269]: 120 redis Sep 10 07:55:36 bastion LinuxCommandsWazuh: User ak [1090269]: 121 redis-cli -h 10.190.15.231 Sep 10 08:27:35 bastion LinuxCommandsWazuh: User ak [1090858]: 121 redis-cli -h 10.190.15.231 Sep 10 08:27:50 bastion LinuxCommandsWazuh: User ak [1090858]: 122 ls Sep 10 08:27:53 bastion LinuxCommandsWazuh: User ak [1090858]: 123 cat Makefile Sep 10 08:28:07 bastion LinuxCommandsWazuh: User ak [1090858]: 124 make nitrox-bash Sep 10 08:30:02 bastion LinuxCommandsWazuh: User ak [1090858]: 125 make nitrox-logs Sep 10 08:31:47 bastion LinuxCommandsWazuh: message repeated 31 times: [ User ak [1090858]: 125 make nitrox-logs ] Sep 10 08:37:17 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 25 exit Sep 10 08:37:21 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 26 ls Sep 10 08:38:00 bastion LinuxCommandsWazuh: User rihan [1090050]: 178 psql Sep 10 08:38:13 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 27 vim README.md Sep 10 08:39:14 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 28 internal Sep 10 08:39:16 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 29 ls Sep 10 08:39:32 bastion LinuxCommandsWazuh: User aarzoo [1091492]: 30 vim README.md Sep 10 09:47:24 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 31 internal Sep 10 09:47:27 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 32 ls Sep 10 09:49:09 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 33 vim README.md Sep 10 09:51:25 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 34 psql Sep 10 09:51:55 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 34 psql Sep 10 09:53:13 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 35 internal Sep 10 09:55:23 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 36 psql -U dbuser 10.53.208.3 -d collab_affiliate Sep 10 10:01:35 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 37 internal Sep 10 10:02:16 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 38 psql Sep 10 10:03:16 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 38 psql Sep 10 10:03:46 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 39 sudo -i -u postgres Sep 10 10:03:46 bastion LinuxCommandsWazuh: message repeated 4 times: [ User aarzoo [1092676]: 39 sudo -i -u postgres] Sep 10 10:12:04 bastion LinuxCommandsWazuh: User rihan [1093122]: 178 psql Sep 10 10:13:35 bastion LinuxCommandsWazuh: User rihan [1093122]: 179 internal Sep 10 10:14:00 bastion LinuxCommandsWazuh: User ak [1093261]: 125 make nitrox-logs Sep 10 10:14:09 bastion LinuxCommandsWazuh: User ak [1093261]: 126 sudo su rihan Sep 10 10:14:16 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 781 sudo su devesh Sep 10 10:14:17 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 782 cd Sep 10 10:14:20 bastion LinuxCommandsWazuh: User rihan [1093379]: 178 psql Sep 10 10:14:21 bastion LinuxCommandsWazuh: User rihan [1093379]: 179 ls Sep 10 10:14:21 bastion LinuxCommandsWazuh: User rihan [1093379]: 180 cd Sep 10 10:14:21 bastion LinuxCommandsWazuh: User rihan [1093379]: 181 ls Sep 10 10:14:24 bastion LinuxCommandsWazuh: User rihan [1093379]: 182 internal Sep 10 10:14:29 bastion LinuxCommandsWazuh: User rihan [1093379]: 183 cd .ssh/ Sep 10 10:14:30 bastion LinuxCommandsWazuh: User rihan [1093379]: 184 ls Sep 10 10:14:35 bastion LinuxCommandsWazuh: User rihan [1093379]: 185 cat id_rsa.pub Sep 10 10:16:21 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 40 la Sep 10 10:16:23 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 41 ls Sep 10 10:17:47 bastion LinuxCommandsWazuh: User rihan [1093122]: 179 internal Sep 10 10:21:38 bastion LinuxCommandsWazuh: User rihan [1093610]: 179 internal Sep 10 10:21:43 bastion LinuxCommandsWazuh: User shobhit [1093703]: 41 mongo Sep 10 10:22:19 bastion LinuxCommandsWazuh: User shobhit [1093703]: 42 kubectl get pods Sep 10 10:22:54 bastion LinuxCommandsWazuh: User shobhit [1093703]: 43 vi Makefile Sep 10 10:26:00 bastion LinuxCommandsWazuh: User shobhit [1093703]: 44 kubectl logs -f service/cookie-cutter Sep 10 10:32:33 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 42 psql Sep 10 10:32:34 bastion LinuxCommandsWazuh: User aarzoo [1092676]: 42 psql Sep 10 10:35:30 bastion LinuxCommandsWazuh: User devesh [1094022]: 126 ls Sep 10 10:36:56 bastion LinuxCommandsWazuh: User devesh [1094121]: 126 ls Sep 10 10:39:59 bastion LinuxCommandsWazuh: User rihan [1093379]: 186 internal Sep 10 10:41:49 bastion LinuxCommandsWazuh: User devesh [1094121]: 127 psql Sep 10 10:41:50 bastion LinuxCommandsWazuh: User devesh [1094121]: 128 ls Sep 10 10:43:17 bastion LinuxCommandsWazuh: User devesh [1094121]: 128 ls Sep 10 10:45:25 bastion LinuxCommandsWazuh: User devesh [1094121]: 129 scp devesh@bastian:/home/devesh/orgs.csv /home/adhd/orgs.csv Sep 10 10:45:52 bastion LinuxCommandsWazuh: User devesh [1094121]: 130 scp devesh@34.131.41.101:/home/devesh/orgs.csv /home/adhd/orgs.csv Sep 10 11:05:51 bastion LinuxCommandsWazuh: User rihan [1093610]: 179 internal Sep 10 11:09:08 bastion LinuxCommandsWazuh: User devesh [1094914]: 130 scp devesh@34.131.41.101:/home/devesh/orgs.csv /home/adhd/orgs.csv Sep 10 11:33:48 bastion LinuxCommandsWazuh: User rihan [1093379]: 187 psql Sep 10 11:33:50 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 783 sudo su rihan Sep 10 11:33:51 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 784 ls Sep 10 11:33:59 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 785 sudo vi Makefile Sep 10 11:34:06 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 786 .bashrc Sep 10 11:34:30 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 787 sudo vi .bashrc Sep 10 11:37:12 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 788 sudo vi .bashrc Sep 10 11:37:16 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 789 ls Sep 10 11:38:44 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 790 sudo vi README.md Sep 10 11:40:08 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 790 sudo vi README.md Sep 10 11:40:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1093360]: 790 sudo vi README.md ] Sep 10 11:40:09 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 791 cd Sep 10 11:40:13 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 792 cd .. Sep 10 11:40:13 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 793 ls Sep 10 11:40:18 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 794 sudo su aarzoo/ Sep 10 11:40:20 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 42 psql Sep 10 11:40:20 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 43 ls Sep 10 11:40:32 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 44 vi .bashrc Sep 10 11:40:43 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 45 cd Sep 10 11:40:43 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 46 ls Sep 10 11:41:00 bastion LinuxCommandsWazuh: User ak [1095421]: 127 exit Sep 10 11:41:11 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 781 sudo su devesh Sep 10 11:41:11 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 782 ls Sep 10 11:41:12 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 783 cd Sep 10 11:41:23 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 783 cd Sep 10 11:41:38 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 46 ls Sep 10 11:41:39 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 46 ls Sep 10 11:44:57 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 208 kubectl exec -it nitrox-dj-65d47f9658-zbkpx bash Sep 10 11:45:04 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 209 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 11:45:40 bastion LinuxCommandsWazuh: User devesh [1097495]: 130 scp devesh@34.131.41.101:/home/devesh/orgs.csv /home/adhd/orgs.csv Sep 10 11:50:21 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 209 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 11:51:05 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 209 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 11:51:19 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 210 ssh ubuntu@34.131.207.201 Sep 10 11:57:27 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 211 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 12:02:53 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 784 sudo vi .bashrc Sep 10 12:02:54 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 785 ls Sep 10 12:03:04 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 47 vi .bashrc Sep 10 12:03:10 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 48 cd .ssh/ Sep 10 12:03:10 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 49 ;s Sep 10 12:03:11 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 50 ls Sep 10 12:03:19 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 51 sudo vi id_rsa.pub Sep 10 12:03:27 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 52 vi id_rsa.pub Sep 10 12:04:33 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 53 cd Sep 10 12:04:39 bastion LinuxCommandsWazuh: User aarzoo [1095276]: 53 cd Sep 10 12:04:40 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 795 sudo su aarzoo Sep 10 12:04:43 bastion LinuxCommandsWazuh: User rihan [2197786]: 189 exit Sep 10 12:04:44 bastion LinuxCommandsWazuh: User rihan [2197786]: 190 ls Sep 10 12:04:44 bastion LinuxCommandsWazuh: User rihan [2197786]: 191 cd Sep 10 12:04:44 bastion LinuxCommandsWazuh: User rihan [2197786]: 192 ls Sep 10 12:04:47 bastion LinuxCommandsWazuh: User rihan [2197786]: 193 cd .ssh/ Sep 10 12:04:48 bastion LinuxCommandsWazuh: User rihan [2197786]: 194 ls Sep 10 12:04:49 bastion LinuxCommandsWazuh: User rihan [2197786]: 195 cat authorized_keys Sep 10 12:05:09 bastion LinuxCommandsWazuh: User rihan [2197786]: 195 cat authorized_keys Sep 10 12:05:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [2197786]: 195 cat authorized_keys ] Sep 10 12:05:09 bastion LinuxCommandsWazuh: User rihan [2197786]: 196 cd Sep 10 12:05:10 bastion LinuxCommandsWazuh: User rihan [2197786]: 197 ls Sep 10 12:05:36 bastion LinuxCommandsWazuh: User rihan [2197786]: 198 vi .bashrc Sep 10 12:05:40 bastion LinuxCommandsWazuh: User rihan [2197786]: 199 source ~/.bashrc Sep 10 12:05:42 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 796 sudo su rihan Sep 10 12:05:48 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 797 sudo su shamailtayyab/ Sep 10 12:05:49 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 208 kubectl exec -it nitrox-dj-65d47f9658-zbkpx bash Sep 10 12:05:49 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 209 cd Sep 10 12:05:51 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 210 cd .ssh/ Sep 10 12:05:51 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 211 ls Sep 10 12:05:57 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 212 cat id_rsa.pub Sep 10 12:06:21 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 213 cd Sep 10 12:06:40 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 214 vi .bashrc Sep 10 12:06:42 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 215 source ~/.bashrc Sep 10 12:06:43 bastion LinuxCommandsWazuh: User shamailtayyab [2197945]: 216 cd Sep 10 12:06:45 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 798 sudo su shamailtayyab Sep 10 12:06:49 bastion LinuxCommandsWazuh: User devesh [2198041]: 130 scp devesh@34.131.41.101:/home/devesh/orgs.csv /home/adhd/orgs.csv Sep 10 12:06:50 bastion LinuxCommandsWazuh: User devesh [2198041]: 131 ls Sep 10 12:06:50 bastion LinuxCommandsWazuh: User devesh [2198041]: 132 cd Sep 10 12:06:50 bastion LinuxCommandsWazuh: User devesh [2198041]: 133 ls Sep 10 12:06:58 bastion LinuxCommandsWazuh: User devesh [2198041]: 134 cd .ssh/ Sep 10 12:06:58 bastion LinuxCommandsWazuh: User devesh [2198041]: 135 ks Sep 10 12:06:59 bastion LinuxCommandsWazuh: User devesh [2198041]: 136 ls Sep 10 12:07:01 bastion LinuxCommandsWazuh: User devesh [2198041]: 137 cat authorized_keys Sep 10 12:07:13 bastion LinuxCommandsWazuh: User devesh [2198041]: 138 cd Sep 10 12:07:41 bastion LinuxCommandsWazuh: User devesh [2198041]: 139 vi .bashrc Sep 10 12:07:44 bastion LinuxCommandsWazuh: User devesh [2198041]: 140 source ~/.bashrc Sep 10 12:08:00 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 799 sudo su devesh Sep 10 12:08:04 bastion LinuxCommandsWazuh: User shobhit [2198157]: 44 kubectl logs -f service/cookie-cutter Sep 10 12:08:05 bastion LinuxCommandsWazuh: User shobhit [2198157]: 45 ls Sep 10 12:08:05 bastion LinuxCommandsWazuh: User shobhit [2198157]: 46 cd Sep 10 12:08:05 bastion LinuxCommandsWazuh: User shobhit [2198157]: 47 ls Sep 10 12:08:07 bastion LinuxCommandsWazuh: User shobhit [2198157]: 48 cd .ssh/ Sep 10 12:08:07 bastion LinuxCommandsWazuh: User shobhit [2198157]: 49 ls Sep 10 12:08:14 bastion LinuxCommandsWazuh: User shobhit [2198157]: 50 cat id_rsa.pub Sep 10 12:08:42 bastion LinuxCommandsWazuh: User shobhit [2198157]: 51 cd Sep 10 12:09:07 bastion LinuxCommandsWazuh: User shobhit [2198157]: 52 vi .bashrc Sep 10 12:09:19 bastion LinuxCommandsWazuh: User shobhit [2198157]: 52 vi .bashrc Sep 10 12:09:24 bastion LinuxCommandsWazuh: User shobhit [2198157]: 53 source .bashrc Sep 10 12:14:44 bastion LinuxCommandsWazuh: User shobhit [2198157]: 53 source .bashrc Sep 10 12:14:46 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 800 sudo su shobhit Sep 10 12:14:47 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 801 ls Sep 10 12:14:47 bastion LinuxCommandsWazuh: User ubuntu [1093360]: 802 cd Sep 10 12:15:58 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 211 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 12:15:59 bastion LinuxCommandsWazuh: User shamailtayyab [1095692]: 211 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 13:28:23 bastion LinuxCommandsWazuh: User venky [2198805]: 76 exit Sep 10 13:28:40 bastion LinuxCommandsWazuh: User venky [2198805]: 77 sudo su - ubuntu Sep 10 13:28:43 bastion LinuxCommandsWazuh: User venky [2198805]: 78 ls Sep 10 13:32:32 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 785 ls Sep 10 13:32:38 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ubuntu [1095505]: 785 ls] Sep 10 13:32:53 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 786 cp Makefile README.md /home/venky/ Sep 10 13:32:57 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 787 sudo cp Makefile README.md /home/venky/ Sep 10 13:33:02 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 788 sudo cp Makefile README.md /home/devesh/ Sep 10 13:33:05 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 789 sudo cp Makefile README.md /home/rihan/ Sep 10 13:33:08 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 790 sudo cp Makefile README.md /home/shamailtayyab/ Sep 10 13:33:13 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 791 sudo cp Makefile README.md /home/shobhit/ Sep 10 13:33:20 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 792 sudo cp Makefile README.md /home/devyanshu/ Sep 10 13:33:49 bastion LinuxCommandsWazuh: User venky [2198805]: 79 vim README.md Sep 10 13:33:52 bastion LinuxCommandsWazuh: User venky [2198805]: 80 make redis Sep 10 13:34:05 bastion LinuxCommandsWazuh: User venky [2198805]: 81 vim README.md Sep 10 13:34:09 bastion LinuxCommandsWazuh: User venky [2198805]: 82 redis Sep 10 13:34:14 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 792 sudo cp Makefile README.md /home/devyanshu/ Sep 10 13:34:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [1095505]: 792 sudo cp Makefile README.md /home/devyanshu/] Sep 10 13:34:23 bastion LinuxCommandsWazuh: User venky [2199024]: 76 exit Sep 10 13:34:23 bastion LinuxCommandsWazuh: User venky [2199024]: 77 ls Sep 10 13:34:24 bastion LinuxCommandsWazuh: User venky [2199024]: 78 cd Sep 10 13:34:24 bastion LinuxCommandsWazuh: User venky [2199024]: 79 ls Sep 10 13:34:43 bastion LinuxCommandsWazuh: User venky [2198805]: 83 vim README.md Sep 10 13:34:44 bastion LinuxCommandsWazuh: User venky [2198805]: 84 redis-server Sep 10 13:34:50 bastion LinuxCommandsWazuh: User venky [2198805]: 84 redis-server Sep 10 13:35:29 bastion LinuxCommandsWazuh: User venky [2199024]: 80 vi .bashrc Sep 10 13:35:33 bastion LinuxCommandsWazuh: User venky [2199024]: 81 source .bashrc Sep 10 13:35:38 bastion LinuxCommandsWazuh: User venky [2199024]: 82 redis-server Sep 10 13:35:44 bastion LinuxCommandsWazuh: User venky [2199024]: 83 ls Sep 10 13:35:46 bastion LinuxCommandsWazuh: User venky [2199024]: 84 cd .ssh/ Sep 10 13:35:53 bastion LinuxCommandsWazuh: User venky [2199024]: 85 ls Sep 10 13:35:59 bastion LinuxCommandsWazuh: User venky [2199024]: 86 cat id_rsa.pub Sep 10 13:36:23 bastion LinuxCommandsWazuh: User venky [2199024]: 86 cat id_rsa.pub Sep 10 13:36:28 bastion LinuxCommandsWazuh: User venky [2199024]: 87 redis-server Sep 10 13:36:29 bastion LinuxCommandsWazuh: User venky [2198805]: 84 redis-server Sep 10 13:36:40 bastion LinuxCommandsWazuh: User venky [2198805]: 85 redis-server Sep 10 13:36:47 bastion LinuxCommandsWazuh: User venky [2199276]: 86 exit Sep 10 13:37:19 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 793 sudo su venky Sep 10 13:37:19 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 794 ls Sep 10 13:38:59 bastion LinuxCommandsWazuh: User ubuntu [1095505]: 794 ls Sep 10 13:39:05 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 817 exit Sep 10 13:39:23 bastion LinuxCommandsWazuh: User venky [2199414]: 8 exit Sep 10 13:39:24 bastion LinuxCommandsWazuh: User venky [2199414]: cd Sep 10 13:39:37 bastion LinuxCommandsWazuh: User venky [2199414]: 100 vi .bashrc Sep 10 13:39:40 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 818 sudo su venky Sep 10 13:39:46 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 819 cd .. Sep 10 13:39:47 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 820 s Sep 10 13:39:48 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 821 ls Sep 10 13:39:52 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 822 sudo si aarzoo/ Sep 10 13:39:55 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 823 sudo su aarzoo/ Sep 10 13:39:57 bastion LinuxCommandsWazuh: User aarzoo [2199511]: 54 exit Sep 10 13:39:58 bastion LinuxCommandsWazuh: User aarzoo [2199511]: 55 cd Sep 10 13:40:11 bastion LinuxCommandsWazuh: User aarzoo [2199511]: 56 vi .bashrc Sep 10 13:40:19 bastion LinuxCommandsWazuh: User aarzoo [2199511]: 57 source .bashrc Sep 10 13:40:20 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 824 sudo su aarzoo Sep 10 13:40:21 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 825 ls Sep 10 13:40:25 bastion LinuxCommandsWazuh: User anshika [2199619]: 60 exit Sep 10 13:40:26 bastion LinuxCommandsWazuh: User anshika [2199619]: 61 cd Sep 10 13:40:41 bastion LinuxCommandsWazuh: User anshika [2199619]: 62 vi .bashrc Sep 10 13:41:00 bastion LinuxCommandsWazuh: User anshika [2199619]: 63 source .bashrc Sep 10 13:41:16 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 826 sudo su anshika Sep 10 13:41:16 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 827 ls Sep 10 13:41:21 bastion LinuxCommandsWazuh: User devesh [2199688]: 141 exit Sep 10 13:41:22 bastion LinuxCommandsWazuh: User devesh [2199688]: 142 cd Sep 10 13:41:37 bastion LinuxCommandsWazuh: User devesh [2199688]: 143 vi .bashrc Sep 10 13:41:40 bastion LinuxCommandsWazuh: User devesh [2199688]: 144 source .bashrc Sep 10 13:41:42 bastion LinuxCommandsWazuh: User devesh [2199688]: 145 ecit Sep 10 13:41:43 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 828 sudo su devesh Sep 10 13:41:44 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 829 ls Sep 10 13:41:49 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 830 sudo su rihan/ Sep 10 13:41:50 bastion LinuxCommandsWazuh: User rihan [2199771]: 200 exit Sep 10 13:41:53 bastion LinuxCommandsWazuh: User rihan [2199771]: 201 cd Sep 10 13:42:03 bastion LinuxCommandsWazuh: User rihan [2199771]: 202 vi .bashrc Sep 10 13:42:09 bastion LinuxCommandsWazuh: User rihan [2199771]: 203 source .bashrc Sep 10 13:42:11 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 831 sudo su rihan Sep 10 13:42:11 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 832 ls Sep 10 13:42:18 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 833 sudo su shadab/ Sep 10 13:42:19 bastion LinuxCommandsWazuh: User shadab [2199854]: 30 exit Sep 10 13:42:20 bastion LinuxCommandsWazuh: User shadab [2199854]: 31 ls Sep 10 13:42:21 bastion LinuxCommandsWazuh: User shadab [2199854]: 32 cd Sep 10 13:42:37 bastion LinuxCommandsWazuh: User shadab [2199854]: 33 vi .bashrc Sep 10 13:42:41 bastion LinuxCommandsWazuh: User shadab [2199854]: 34 source .bashrc Sep 10 13:42:44 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 834 sudo su shadab Sep 10 13:42:45 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 835 ls Sep 10 13:42:48 bastion LinuxCommandsWazuh: User shobhit [2199929]: 54 exit Sep 10 13:42:49 bastion LinuxCommandsWazuh: User shobhit [2199929]: 55 cd Sep 10 13:42:50 bastion LinuxCommandsWazuh: User shobhit [2199929]: 56 ls Sep 10 13:43:04 bastion LinuxCommandsWazuh: User shobhit [2199929]: 57 vi .bashrc Sep 10 13:43:10 bastion LinuxCommandsWazuh: User shobhit [2199929]: 58 source .bashrc Sep 10 13:43:12 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 836 sudo su shobhit Sep 10 13:43:12 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 837 ls Sep 10 13:43:18 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 817 exit Sep 10 13:43:18 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 818 ls Sep 10 13:43:19 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 819 cd Sep 10 13:43:28 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 820 vi .bashrc Sep 10 13:44:13 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 821 ls Sep 10 13:44:17 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 822 cd .. Sep 10 13:44:17 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 823 ls Sep 10 13:44:21 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 824 sudo su ak/ Sep 10 13:44:22 bastion LinuxCommandsWazuh: User ak [2200096]: 127 exit Sep 10 13:44:27 bastion LinuxCommandsWazuh: User ak [2200096]: 128 cd Sep 10 13:44:41 bastion LinuxCommandsWazuh: User ak [2200096]: 129 vi .bashrc Sep 10 13:44:46 bastion LinuxCommandsWazuh: User ak [2200096]: 130 source .bashrc Sep 10 13:44:48 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 825 sudo su ak Sep 10 13:44:48 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 826 ls Sep 10 13:44:54 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 121 exit Sep 10 13:44:54 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 122 ;s Sep 10 13:44:55 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 123 ls Sep 10 13:44:56 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 124 cd Sep 10 13:45:09 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 125 vi .bashrc Sep 10 13:45:13 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 126 source .bashrc Sep 10 13:45:17 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 127 redis-cli Sep 10 13:45:22 bastion LinuxCommandsWazuh: User devyanshu [2200174]: 128 redis Sep 10 13:45:24 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 827 sudo su devyanshu Sep 10 13:45:25 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 828 ls Sep 10 13:45:33 bastion LinuxCommandsWazuh: User shamailtayyab [2200271]: 220 kubetail cookie-cutter-queues | grep -e 'Key: ' Sep 10 13:45:34 bastion LinuxCommandsWazuh: User shamailtayyab [2200271]: 221 ls Sep 10 13:45:35 bastion LinuxCommandsWazuh: User shamailtayyab [2200271]: 222 cd Sep 10 13:45:45 bastion LinuxCommandsWazuh: User shamailtayyab [2200271]: 223 vi .bashrc Sep 10 13:45:49 bastion LinuxCommandsWazuh: User shamailtayyab [2200271]: 224 source .bashrc Sep 10 13:45:52 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 829 sudo su shamailtayyab Sep 10 13:46:36 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 830 ls Sep 10 13:46:36 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 831 cd Sep 10 13:46:36 bastion LinuxCommandsWazuh: User ubuntu [2200011]: 832 ls Sep 10 13:46:38 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 838 sudo su ubuntu Sep 10 13:46:38 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 839 ls Sep 10 13:46:53 bastion LinuxCommandsWazuh: User ubuntu [2199398]: 839 ls Sep 10 13:46:53 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2199398]: 839 ls] Sep 10 13:56:38 bastion LinuxCommandsWazuh: User venky [2200585]: 101 exit Sep 10 13:57:32 bastion LinuxCommandsWazuh: User venky [2200585]: 102 sudo su Sep 10 14:01:55 bastion LinuxCommandsWazuh: User venky [2199276]: 87 redis-server Sep 10 14:02:36 bastion LinuxCommandsWazuh: User venky [2199276]: 88 echo $redis-server Sep 10 14:02:39 bastion LinuxCommandsWazuh: User venky [2199276]: 89 echo redis-server Sep 10 14:02:57 bastion LinuxCommandsWazuh: User venky [2199276]: valll=$redis-server Sep 10 14:03:04 bastion LinuxCommandsWazuh: User venky [2199276]: 1 valll Sep 10 14:03:09 bastion LinuxCommandsWazuh: User venky [2199276]: 1 valll Sep 10 14:03:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2199276]: 1 valll] Sep 10 14:03:25 bastion LinuxCommandsWazuh: User venky [2199276]: 2 vim .bashrc Sep 10 14:03:37 bastion LinuxCommandsWazuh: User venky [2199276]: 2 vim .bashrc Sep 10 14:04:22 bastion LinuxCommandsWazuh: User venky [2199276]: 3 scp ubuntu@34.131.207.201:/home/ubuntu/dump-2024-09-10_19-15.rdb . Sep 10 14:05:42 bastion LinuxCommandsWazuh: User venky [2199276]: 4 ll