Jan 30 00:24:01 bastion LinuxCommandsWazuh: User devesh [3830625]: 789 kubectl logs -f dramatiq-vortex-85b7745d69-kbzvz Jan 30 12:11:12 bastion LinuxCommandsWazuh: User ankur [3886440]: 754 exit Jan 30 12:11:13 bastion LinuxCommandsWazuh: User ankur [3886440]: 755 ls Jan 30 12:11:50 bastion LinuxCommandsWazuh: User ankur [3886440]: 756 clickhouse-ssh Jan 30 12:13:32 bastion LinuxCommandsWazuh: User ankur [3886574]: 757 exit Jan 30 12:13:45 bastion LinuxCommandsWazuh: User ankur [3886574]: 758 kubectl describe conifmaps house-of-click-config Jan 30 12:13:54 bastion LinuxCommandsWazuh: User ankur [3886574]: 759 kubectl describe configmaps house-of-click-config Jan 30 13:06:27 bastion LinuxCommandsWazuh: User venky [3887841]: 208 mongo Jan 30 13:06:38 bastion LinuxCommandsWazuh: User ankur [3886574]: 759 kubectl describe configmaps house-of-click-config Jan 30 13:07:09 bastion LinuxCommandsWazuh: User venky [3887841]: 209 psql Jan 30 13:20:15 bastion LinuxCommandsWazuh: User ankur [3888224]: 760 exit Jan 30 13:20:16 bastion LinuxCommandsWazuh: User ankur [3888224]: 761 ls Jan 30 13:20:36 bastion LinuxCommandsWazuh: User ankur [3888224]: 762 make service Jan 30 13:20:58 bastion LinuxCommandsWazuh: User ankur [3888224]: 763 kubectl get pods Jan 30 13:21:44 bastion LinuxCommandsWazuh: User ankur [3888224]: 764 clickhouse-ssh Jan 30 13:22:02 bastion LinuxCommandsWazuh: User ankur [3888224]: 765 ls Jan 30 13:22:07 bastion LinuxCommandsWazuh: User ankur [3888224]: 766 make service Jan 30 13:22:23 bastion LinuxCommandsWazuh: User ankur [3888224]: 767 kubectl exec --it house-of-click -- bash Jan 30 13:22:27 bastion LinuxCommandsWazuh: User ankur [3888224]: 768 kubectl exec -it house-of-click -- bash Jan 30 13:22:30 bastion LinuxCommandsWazuh: User ankur [3888224]: 769 kubectl exec it house-of-click -- bash Jan 30 13:22:36 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3888224]: 769 kubectl exec it house-of-click -- bash] Jan 30 13:22:41 bastion LinuxCommandsWazuh: User ankur [3888224]: 770 kubectl exec it service/house-of-click -- bash Jan 30 13:22:45 bastion LinuxCommandsWazuh: User ankur [3888224]: 771 kubectl exec --it service/house-of-click -- bash Jan 30 13:23:17 bastion LinuxCommandsWazuh: User ankur [3888224]: 772 kubectl logs -f service/house-of-click Jan 30 13:23:18 bastion LinuxCommandsWazuh: User ankur [3888224]: 772 kubectl logs -f service/house-of-click Jan 30 13:24:31 bastion LinuxCommandsWazuh: User ankur [3888602]: 760 exit Jan 30 13:24:36 bastion LinuxCommandsWazuh: User ankur [3888602]: 761 kubectl get pods Jan 30 13:24:47 bastion LinuxCommandsWazuh: User ankur [3888602]: 762 kubectl get pods | grep -i house Jan 30 13:25:03 bastion LinuxCommandsWazuh: User ankur [3888602]: 763 kubectl exec --it house-of-click-899d5894c-54fsn -- bash Jan 30 13:25:08 bastion LinuxCommandsWazuh: User devesh [3888778]: 779 byobu Jan 30 13:25:16 bastion LinuxCommandsWazuh: User devesh [3888778]: 780 kubectl get pods Jan 30 13:25:30 bastion LinuxCommandsWazuh: User devesh [3888778]: 781 kubectl logs -f dramatiq-vortex-85b7745d69-9fshl Jan 30 13:27:12 bastion LinuxCommandsWazuh: User ankur [3888602]: 764 kubectl exec -it house-of-click-899d5894c-54fsn -- bash Jan 30 13:27:32 bastion LinuxCommandsWazuh: User devesh [3888778]: 781 kubectl logs -f dramatiq-vortex-85b7745d69-9fshl Jan 30 13:27:35 bastion LinuxCommandsWazuh: User devesh [3888778]: 782 make cookie-env Jan 30 13:42:50 bastion LinuxCommandsWazuh: User ankur [3889196]: 760 exit Jan 30 13:42:55 bastion LinuxCommandsWazuh: User ankur [3889196]: 761 kubectl describe configmaps house-of-click-config Jan 30 13:45:02 bastion LinuxCommandsWazuh: User ankur [3888602]: 764 kubectl exec -it house-of-click-899d5894c-54fsn -- bash Jan 30 13:46:05 bastion LinuxCommandsWazuh: User ankur [3888602]: 764 kubectl exec -it house-of-click-899d5894c-54fsn -- bash Jan 30 13:46:12 bastion LinuxCommandsWazuh: User ankur [3888602]: 765 kubectl get pods | grep -i house Jan 30 13:49:05 bastion LinuxCommandsWazuh: User devesh [3889404]: 779 byobu Jan 30 13:50:19 bastion LinuxCommandsWazuh: User devesh [3888778]: 782 make cookie-env Jan 30 13:51:27 bastion LinuxCommandsWazuh: User ankur [3888602]: 766 kubectl exec -it house-of-click-5744df96d-mmb5x -- bash Jan 30 13:51:32 bastion LinuxCommandsWazuh: User ankur [3888602]: 767 kubectl get pods | grep -i house Jan 30 13:53:06 bastion LinuxCommandsWazuh: User ankur [3888602]: 768 kubectl exec -it house-of-click-5744df96d-mmb5x -- bash Jan 30 13:54:07 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1612 clickhouse-client --password Jan 30 13:54:38 bastion LinuxCommandsWazuh: User ankur [3889196]: 762 clickhouse-ssh Jan 30 13:54:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3889196]: 762 clickhouse-ssh ] Jan 30 13:54:55 bastion LinuxCommandsWazuh: User ankur [3893972]: 772 exit Jan 30 14:05:15 bastion LinuxCommandsWazuh: User ubuntu [3903744]: 1612 clickhouse-client --password Jan 30 14:05:16 bastion LinuxCommandsWazuh: User ubuntu [3903744]: 1613 ls Jan 30 14:07:08 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1613 cd .. Jan 30 14:07:08 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1614 ls Jan 30 14:07:12 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1615 cd .. Jan 30 14:07:13 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1616 ls Jan 30 14:07:16 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1617 cd Jan 30 14:07:16 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1618 ;s Jan 30 14:07:17 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1619 ls Jan 30 14:07:21 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1620 cd .. Jan 30 14:07:26 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1621 rm -rf shobhit/ Jan 30 14:07:30 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1622 sudo rm -rf shobhit/ Jan 30 14:07:32 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1623 ls Jan 30 14:07:36 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1624 cd mohtashim/ Jan 30 14:07:37 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1625 ls Jan 30 14:07:37 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1626 cd Jan 30 14:07:44 bastion LinuxCommandsWazuh: User ankur [3893972]: 773 kubectl exec -it house-of-click-5744df96d-mmb5x -- bash Jan 30 14:07:49 bastion LinuxCommandsWazuh: User mohtashim [3906323]: Jan 30 14:07:50 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 1 cd Jan 30 14:07:50 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 2 ls Jan 30 14:07:52 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 2 ls Jan 30 14:08:09 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 3 gcloud auth activate-service-account --key-file=/home/ubuntu/service-account-key.json Jan 30 14:08:10 bastion LinuxCommandsWazuh: User ankur [3893972]: 774 kubectl get pods | grep -i house Jan 30 14:08:19 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 4 gcloud auth activate-service-account --key-file=/home/ubuntu/service.json Jan 30 14:08:44 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 5 cloud auth activate-service-account --key-file=/home/service.json Jan 30 14:08:50 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 6 gcloud auth activate-service-account --key-file=/home/service.json Jan 30 14:08:58 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 7 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jan 30 14:09:10 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 8 kuebctl get pods Jan 30 14:09:15 bastion LinuxCommandsWazuh: User mohtashim [3906323]: kubectl get pods Jan 30 14:09:51 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 10 kubectl config set-context --current --namespace=nitrox-production Jan 30 14:11:20 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 11 kubectl config set-context --current --namespace=my-namespace Jan 30 14:11:24 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 12 kubectl config set-context --current --namespace=nitrox-production Jan 30 14:11:35 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 13 sudo visudo Jan 30 14:12:15 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 14 groups mohtashim Jan 30 14:13:06 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 15 sudo grep -E '(%|mohtashim)' /etc/sudoers /etc/sudoers.d/* Jan 30 14:13:36 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 16 grep -E 'adm|dialout|cdrom|floppy|audio|dip|video|plugdev|netdev|lxd|ubuntu|google-sudoers' /etc/group Jan 30 14:14:51 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 17 sudo deluser mohtashim sudo Jan 30 14:15:05 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 18 sudo deluser mohtashim google-sudoers Jan 30 14:15:07 bastion ubuntu: root@ [3913404]: exit [0] Jan 30 14:15:09 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 19 sudo su Jan 30 14:16:05 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 20 groups mohtashim Jan 30 14:16:16 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 21 sudo grep -E '(%|mohtashim)' /etc/sudoers /etc/sudoers.d/* Jan 30 14:16:43 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 22 sudo -l -U mohtashim Jan 30 14:17:19 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 23 sudo grep -E 'adm|dialout|cdrom|floppy|audio|dip|video|plugdev|netdev|lxd|ubuntu' /etc/sudoers Jan 30 14:17:46 bastion LinuxCommandsWazuh: User venky [3915910]: 209 psql Jan 30 14:17:47 bastion LinuxCommandsWazuh: User venky [3915910]: 210 cd Jan 30 14:17:47 bastion LinuxCommandsWazuh: User venky [3915910]: 211 ls Jan 30 14:17:50 bastion LinuxCommandsWazuh: User venky [3915910]: 212 sudo su Jan 30 14:18:00 bastion LinuxCommandsWazuh: User venky [3915910]: 213 groups venky Jan 30 14:18:36 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 24 sudo su venky Jan 30 14:18:43 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 25 sudo usermod -aG recordusers mohtashim Jan 30 14:18:59 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 26 sudo setfacl -m u:mohtashim:0 /home/ubuntu Jan 30 14:19:01 bastion ubuntu: root@ [3917131]: exit [0] Jan 30 14:19:02 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 27 sudo su Jan 30 14:19:21 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 28 sudo grep -Rn 'mohtashim' /etc/sudoers* Jan 30 14:19:23 bastion ubuntu: root@ [3917519]: exit [0] Jan 30 14:19:25 bastion LinuxCommandsWazuh: User mohtashim [3906323]: 29 sudo su Jan 30 14:19:45 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1627 sudo su mohtashim Jan 30 14:19:47 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 30 exit Jan 30 14:19:50 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 31 sudo su Jan 30 14:19:52 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 32 ls Jan 30 14:19:52 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 33 cd Jan 30 14:19:53 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 34 ls Jan 30 14:19:58 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 35 sudo su rihan Jan 30 14:19:59 bastion LinuxCommandsWazuh: User mohtashim [3917909]: 36 cd Jan 30 14:20:02 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1627 sudo su mohtashim Jan 30 14:20:02 bastion LinuxCommandsWazuh: User ubuntu [3893125]: 1628 ls Jan 30 14:20:09 bastion LinuxCommandsWazuh: User ankur [3918432]: 772 exit Jan 30 14:20:09 bastion LinuxCommandsWazuh: User ankur [3918432]: 773 ls Jan 30 14:22:51 bastion LinuxCommandsWazuh: User rihan [3921065]: 604 psql Jan 30 14:23:05 bastion LinuxCommandsWazuh: User rihan [3921065]: 605 kubectl get pods Jan 30 14:23:29 bastion LinuxCommandsWazuh: User rihan [3921065]: 606 kubetail datapulse-celery-5bf4cff467-ddx9p Jan 30 14:25:08 bastion LinuxCommandsWazuh: User rihan [3925997]: 604 psql Jan 30 14:27:38 bastion LinuxCommandsWazuh: User rihan [3925997]: 604 psql Jan 30 14:27:52 bastion LinuxCommandsWazuh: User rihan [3925997]: 605 psql -d datapuse_v1 -U postgres Jan 30 14:51:15 bastion LinuxCommandsWazuh: User rihan [3925997]: 606 psql -d datapulse_v1 -U postgres Jan 30 14:53:13 bastion LinuxCommandsWazuh: User ankur [3893972]: 775 kubectl exec -it house-of-click-554fdfd8b-sr74k -- bash Jan 30 14:54:18 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1630 sudo su ankur Jan 30 14:54:23 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1631 sudo su mohtasim Jan 30 14:54:26 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1632 cd.. Jan 30 14:54:27 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1633 cd .. Jan 30 14:54:27 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1634 ls Jan 30 14:54:33 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 37 exit Jan 30 14:54:34 bastion LinuxCommandsWazuh: User ankur [3893972]: 776 kubectl get pods | grep -i house Jan 30 14:54:35 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 38 cd Jan 30 14:54:35 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 39 ls Jan 30 14:54:36 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 39 ls Jan 30 14:54:40 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 40 cd .. Jan 30 14:54:40 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 41 ls Jan 30 14:54:40 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 42 cd Jan 30 14:54:41 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 43 ls Jan 30 14:54:43 bastion LinuxCommandsWazuh: User mohtashim [3954985]: 44 exi Jan 30 14:54:50 bastion LinuxCommandsWazuh: User ubuntu [3954664]: 1635 sudo su mohtashim Jan 30 14:54:53 bastion LinuxCommandsWazuh: User ankur [3955393]: 773 ls Jan 30 14:54:54 bastion LinuxCommandsWazuh: User ankur [3955393]: 773 ls Jan 30 14:54:54 bastion LinuxCommandsWazuh: User ankur [3955393]: 774 cd Jan 30 14:54:55 bastion LinuxCommandsWazuh: User ankur [3955393]: 775 ls Jan 30 14:55:01 bastion LinuxCommandsWazuh: User ankur [3955393]: 776 cp Makefile /home/mohtashim/ Jan 30 14:55:05 bastion LinuxCommandsWazuh: User ankur [3955393]: 777 sudo cp Makefile /home/mohtashim/ Jan 30 14:55:11 bastion LinuxCommandsWazuh: User ankur [3955393]: 778 sudo cp README.md /home/mohtashim/ Jan 30 14:55:12 bastion LinuxCommandsWazuh: User ankur [3955393]: 779 cd Jan 30 14:55:12 bastion LinuxCommandsWazuh: User ankur [3955393]: 780 ls Jan 30 14:55:19 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 45 exit Jan 30 14:55:20 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 46 cd Jan 30 14:55:20 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 47 ls Jan 30 14:55:24 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 48 cat Makefile Jan 30 14:55:33 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 49 vi Makefile Jan 30 14:55:33 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 50 ls Jan 30 14:55:37 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 51 cat README.md Jan 30 14:55:41 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 52 cd Jan 30 14:55:41 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 53 ls Jan 30 14:55:52 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 54 ssh-keygen Jan 30 14:55:56 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 55 cat /home/mohtashim/.ssh/id_rsa.pub Jan 30 14:56:25 bastion LinuxCommandsWazuh: User ankur [3893972]: 777 kubectl exec -it house-of-click-84c8c9999b-hcbvq -- bash Jan 30 14:56:29 bastion LinuxCommandsWazuh: User ankur [3893972]: 778 kubectl get pods | grep -i house Jan 30 15:01:49 bastion LinuxCommandsWazuh: User ankur [3893972]: 779 kubectl exec -it house-of-click-84c8c9999b-hcbvq -- bash Jan 30 15:02:02 bastion LinuxCommandsWazuh: User ankur [3893972]: 780 kubectl get pods | grep -i house Jan 30 15:03:32 bastion LinuxCommandsWazuh: User ankur [3893972]: 781 kubectl exec -it house-of-click-8678f7d859-p45hz -- bash Jan 30 15:03:34 bastion LinuxCommandsWazuh: User ankur [3893972]: 782 kubectl get pods | grep -i house Jan 30 15:05:55 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 56 ssh ubuntu@34.131.103.89 Jan 30 15:07:06 bastion LinuxCommandsWazuh: User ankur [3893972]: 783 kubectl exec -it house-of-click-8678f7d859-p45hz -- bash Jan 30 15:07:50 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 57 ssh mohtashim@34.131.103.89 Jan 30 15:07:50 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 58 ls Jan 30 15:07:54 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 59 cat Makefile Jan 30 15:08:01 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 59 cat Makefile Jan 30 15:08:09 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 60 kubectl get pods Jan 30 15:08:22 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 61 kubectl get hpa Jan 30 15:10:25 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 62 kubectl get pods Jan 30 15:10:31 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [3955881]: 62 kubectl get pods] Jan 30 15:11:24 bastion LinuxCommandsWazuh: User ankur [3893972]: 784 kubectl get pods | grep -i house Jan 30 15:11:53 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 63 vi Makefile Jan 30 15:12:00 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 63 vi Makefile Jan 30 15:12:02 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 64 make cookie-task-logs Jan 30 15:12:07 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 65 k get deploy Jan 30 15:12:14 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 66 kubectl get deploy Jan 30 15:12:37 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 67 vi Makefile Jan 30 15:12:47 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 68 make cookie-task-logs Jan 30 15:13:52 bastion LinuxCommandsWazuh: User ankur [3893972]: 785 kubectl exec -it house-of-click-c7c759b8c-vhwtd -- bash Jan 30 15:13:56 bastion LinuxCommandsWazuh: User ankur [3893972]: 785 kubectl exec -it house-of-click-c7c759b8c-vhwtd -- bash Jan 30 15:14:00 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 69 vi .bashrc Jan 30 15:14:05 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 70 source .bashrc Jan 30 15:14:11 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 71 internal Jan 30 15:14:13 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 72 k get pods Jan 30 15:14:18 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:15:13 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:15:21 bastion LinuxCommandsWazuh: message repeated 6 times: [ User mohtashim [3955881]: 73 k get hpa] Jan 30 15:17:22 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:17:37 bastion LinuxCommandsWazuh: message repeated 6 times: [ User mohtashim [3955881]: 73 k get hpa] Jan 30 15:18:28 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:18:38 bastion LinuxCommandsWazuh: message repeated 11 times: [ User mohtashim [3955881]: 73 k get hpa] Jan 30 15:19:04 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:19:26 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [3955881]: 73 k get hpa] Jan 30 15:19:37 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:19:38 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:23:54 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 73 k get hpa Jan 30 15:23:56 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3955881]: 73 k get hpa] Jan 30 15:23:58 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 74 k get pods Jan 30 15:24:11 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 74 k get pods Jan 30 15:24:12 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 74 k get pods Jan 30 15:24:22 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 74 k get pods Jan 30 15:24:35 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 75 k describe pod house-of-click-75444bb549-b2jvj Jan 30 15:24:53 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 76 k get pods Jan 30 15:24:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3955881]: 76 k get pods] Jan 30 15:25:17 bastion LinuxCommandsWazuh: User ankur [3893972]: 786 kubectl logs -f house-of-click-c7c759b8c-vhwtd Jan 30 15:25:18 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [3893972]: 786 kubectl logs -f house-of-click-c7c759b8c-vhwtd] Jan 30 15:28:45 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 76 k get pods Jan 30 15:28:53 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 77 k get deploy Jan 30 15:29:00 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 78 k get hpa Jan 30 15:49:15 bastion LinuxCommandsWazuh: User ankur [3893972]: 787 kubectl exec -it house-of-click-c7c759b8c-vhwtd -- bash Jan 30 15:49:15 bastion LinuxCommandsWazuh: User ankur [3893972]: 787 kubectl exec -it house-of-click-c7c759b8c-vhwtd -- bash Jan 30 15:49:18 bastion LinuxCommandsWazuh: User ankur [3893972]: 788 kubectl get pods | grep -i house Jan 30 15:53:51 bastion LinuxCommandsWazuh: User rihan [3921065]: 606 kubetail datapulse-celery-5bf4cff467-ddx9p Jan 30 15:56:37 bastion LinuxCommandsWazuh: User devesh [3978028]: 784 byobu Jan 30 16:03:41 bastion LinuxCommandsWazuh: User ankur [3893972]: 789 kubectl exec -it house-of-click-5ffc6dfb98-f7cpt -- bash Jan 30 16:03:45 bastion LinuxCommandsWazuh: User ankur [3893972]: 790 kubectl get pods | grep -i house Jan 30 16:06:13 bastion LinuxCommandsWazuh: User ankur [3893972]: 790 kubectl get pods | grep -i house Jan 30 16:06:21 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [3893972]: 790 kubectl get pods | grep -i house] Jan 30 16:06:22 bastion LinuxCommandsWazuh: User ankur [3893972]: 790 kubectl get pods | grep -i house Jan 30 16:06:25 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3893972]: 790 kubectl get pods | grep -i house] Jan 30 16:06:36 bastion LinuxCommandsWazuh: User ankur [3893972]: 790 kubectl get pods | grep -i house Jan 30 16:08:11 bastion LinuxCommandsWazuh: User ankur [3991787]: 773 ls Jan 30 16:19:47 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 78 k get hpa Jan 30 16:19:47 bastion LinuxCommandsWazuh: message repeated 4 times: [ User mohtashim [3955881]: 78 k get hpa] Jan 30 16:19:48 bastion LinuxCommandsWazuh: User ankur [3893972]: 791 kubectl exec -it house-of-click-5dbf4bbc9c-r2rxn -- bash Jan 30 16:19:48 bastion LinuxCommandsWazuh: User ankur [3991787]: 774 kubectl logs -f house-of-click-5dbf4bbc9c-r2rxn Jan 30 16:19:49 bastion LinuxCommandsWazuh: message repeated 30 times: [ User ankur [3991787]: 774 kubectl logs -f house-of-click-5dbf4bbc9c-r2rxn] Jan 30 16:19:51 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 79 k get pods Jan 30 16:19:55 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 79 k get pods Jan 30 16:20:06 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 80 k delete deploy house-of-click Jan 30 16:20:14 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 81 k get pods Jan 30 16:20:18 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3955881]: 81 k get pods] Jan 30 16:20:24 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 82 k describe pod dramatiq-vortex-859457d848-fsrwd Jan 30 16:20:43 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 82 k describe pod dramatiq-vortex-859457d848-fsrwd Jan 30 16:20:48 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 83 k get pods Jan 30 16:20:54 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 84 k delete pod dramatiq-vortex-859457d848-fsrwd Jan 30 16:21:02 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 85 k get pods Jan 30 16:22:48 bastion LinuxCommandsWazuh: User ankur [3893972]: 792 kubectl get pods | grep -i house Jan 30 16:23:12 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 85 k get pods Jan 30 16:23:24 bastion LinuxCommandsWazuh: User mohtashim [3955881]: 86 k get hpa Jan 30 16:35:24 bastion LinuxCommandsWazuh: User ankur [3955393]: 781 sudo su mohtashim Jan 30 16:36:17 bastion LinuxCommandsWazuh: User ankur [3991787]: 774 kubectl logs -f house-of-click-5dbf4bbc9c-r2rxn Jan 30 16:41:19 bastion LinuxCommandsWazuh: User ankur [3893972]: 793 kubectl exec -it house-of-click-6c7596fcbf-xl6kt -- bash Jan 30 16:44:23 bastion LinuxCommandsWazuh: User ankur [3893972]: 794 kubectl get pods | grep -i house Jan 30 16:44:26 bastion LinuxCommandsWazuh: User ankur [3893972]: 794 kubectl get pods | grep -i house Jan 30 16:46:19 bastion LinuxCommandsWazuh: User ankur [3991787]: 775 kubectl logs -f house-of-click-6c7596fcbf-xl6kt Jan 30 16:46:19 bastion LinuxCommandsWazuh: message repeated 14 times: [ User ankur [3991787]: 775 kubectl logs -f house-of-click-6c7596fcbf-xl6kt] Jan 30 16:48:33 bastion LinuxCommandsWazuh: User ankur [3893972]: 794 kubectl get pods | grep -i house Jan 30 16:52:06 bastion LinuxCommandsWazuh: User ankur [3893972]: 795 kubectl exec -it house-of-click-7f7dcc57bd-lfgsv -- bash Jan 30 16:52:25 bastion LinuxCommandsWazuh: User ankur [3893972]: 796 kubectl get pods | grep -i house Jan 30 16:52:42 bastion LinuxCommandsWazuh: User ankur [3893972]: 796 kubectl get pods | grep -i house Jan 30 16:52:44 bastion LinuxCommandsWazuh: User ankur [3893972]: 796 kubectl get pods | grep -i house Jan 30 16:52:45 bastion LinuxCommandsWazuh: User ankur [3893972]: 796 kubectl get pods | grep -i house Jan 30 16:53:44 bastion LinuxCommandsWazuh: User ankur [3893972]: 796 kubectl get pods | grep -i house Jan 30 17:11:45 bastion LinuxCommandsWazuh: User ankur [3893972]: 797 kubectl exec -it house-of-click-fbd46d58d-j8xbn -- bash Jan 30 17:11:48 bastion LinuxCommandsWazuh: User ankur [3991787]: 776 kubectl logs -f house-of-click-fbd46d58d-j8xbn Jan 30 17:11:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3991787]: 776 kubectl logs -f house-of-click-fbd46d58d-j8xbn] Jan 30 17:12:00 bastion LinuxCommandsWazuh: User ankur [4058445]: 824 clickhouse-ssh Jan 30 17:12:02 bastion LinuxCommandsWazuh: User ankur [4058445]: 825 ls Jan 30 17:12:15 bastion LinuxCommandsWazuh: User ankur [4058445]: 826 clickhouse-ssh Jan 30 17:12:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [4058445]: 826 clickhouse-ssh ] Jan 30 17:12:59 bastion LinuxCommandsWazuh: User ankur [4058693]: 826 clickhouse-ssh Jan 30 17:13:01 bastion LinuxCommandsWazuh: User ankur [4058693]: 827 ls Jan 30 17:13:40 bastion LinuxCommandsWazuh: User ankur [4058693]: 828 clickhouse-ssh Jan 30 17:13:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [4058693]: 828 clickhouse-ssh ] Jan 30 17:13:44 bastion LinuxCommandsWazuh: User ankur [4058693]: 829 ls Jan 30 17:13:50 bastion LinuxCommandsWazuh: User ankur [4058693]: 830 make service Jan 30 17:14:26 bastion LinuxCommandsWazuh: User ankur [4058693]: 831 clickhouse-ssh Jan 30 17:14:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [4058693]: 831 clickhouse-ssh ] Jan 30 17:17:23 bastion LinuxCommandsWazuh: User ankur [4059085]: 832 exit Jan 30 17:17:24 bastion LinuxCommandsWazuh: User ankur [4059085]: 833 l Jan 30 17:18:51 bastion LinuxCommandsWazuh: User ankur [4059205]: 832 exit Jan 30 17:20:16 bastion LinuxCommandsWazuh: User ubuntu [4059398]: 1636 sudo su ankur Jan 30 17:20:20 bastion LinuxCommandsWazuh: User ankur [4059415]: 832 exit Jan 30 17:20:21 bastion LinuxCommandsWazuh: User ankur [4059415]: 833 cd Jan 30 17:20:28 bastion LinuxCommandsWazuh: User ankur [4059415]: 834 clickhouse-ssh Jan 30 17:20:35 bastion LinuxCommandsWazuh: User ankur [4059205]: 833 clickhouse-ssh Jan 30 17:20:40 bastion LinuxCommandsWazuh: User ankur [4059205]: 833 clickhouse-ssh Jan 30 17:20:41 bastion LinuxCommandsWazuh: User ankur [4059415]: 835 echo $clickhouse-ssh Jan 30 17:20:56 bastion LinuxCommandsWazuh: User ankur [4059415]: 836 vi .bashrc Jan 30 17:20:57 bastion LinuxCommandsWazuh: User ubuntu [4059398]: 1637 sudo su ankur Jan 30 17:21:22 bastion LinuxCommandsWazuh: User ankur [4059205]: 833 clickhouse-ssh Jan 30 17:21:23 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [4059205]: 833 clickhouse-ssh ] Jan 30 17:21:52 bastion LinuxCommandsWazuh: User ankur [4059601]: 839 exit Jan 30 17:22:08 bastion LinuxCommandsWazuh: User ankur [4059601]: 840 clickhouse-ssh Jan 30 17:22:14 bastion LinuxCommandsWazuh: User ankur [4059601]: 840 clickhouse-ssh Jan 30 17:22:58 bastion LinuxCommandsWazuh: User ankur [4059798]: 840 clickhouse-ssh Jan 30 17:22:59 bastion LinuxCommandsWazuh: User ankur [4059798]: 841 ls Jan 30 17:23:05 bastion LinuxCommandsWazuh: User ankur [4059798]: 842 make service Jan 30 17:24:07 bastion LinuxCommandsWazuh: User ankur [4059798]: 843 kubectl get pods | grep -i house Jan 30 17:24:35 bastion LinuxCommandsWazuh: User ankur [4059798]: 844 kubectl exec -it house-of-click-fbd46d58d-j8xbn -- bash Jan 30 17:28:08 bastion LinuxCommandsWazuh: User ankur [4059798]: 845 kubectl logs -f house-of-click-fbd46d58d-j8xbn Jan 30 17:28:13 bastion LinuxCommandsWazuh: User ankur [4059798]: 846 clickhouse-ssh Jan 30 17:28:27 bastion LinuxCommandsWazuh: User ankur [4060109]: 842 clickhouse-ssh Jan 30 17:28:28 bastion LinuxCommandsWazuh: User ankur [4060109]: 842 clickhouse-ssh Jan 30 17:28:56 bastion LinuxCommandsWazuh: User ankur [4060109]: 843 exls Jan 30 17:28:56 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [4060109]: 843 exls] Jan 30 17:28:57 bastion LinuxCommandsWazuh: User ankur [4060109]: 844 ls Jan 30 17:29:20 bastion LinuxCommandsWazuh: User ubuntu [4060250]: 1638 exit Jan 30 17:29:22 bastion LinuxCommandsWazuh: User ankur [4060263]: 842 clickhouse-ssh Jan 30 17:29:24 bastion LinuxCommandsWazuh: User ankur [4060263]: 843 cd Jan 30 17:29:26 bastion LinuxCommandsWazuh: User ankur [4060263]: 844 clickhouse-ssh Jan 30 17:29:30 bastion LinuxCommandsWazuh: User ankur [4060263]: 844 clickhouse-ssh Jan 30 17:29:39 bastion LinuxCommandsWazuh: User ankur [4060263]: 845 cd Jan 30 17:29:41 bastion LinuxCommandsWazuh: User ankur [4060263]: 846 cd .ssh/ Jan 30 17:29:42 bastion LinuxCommandsWazuh: User ankur [4060263]: 847 ls Jan 30 17:29:48 bastion LinuxCommandsWazuh: User ankur [4060263]: 848 cat id_rsa.pub Jan 30 17:30:07 bastion LinuxCommandsWazuh: User ankur [4060263]: 849 clickhouse-ssh Jan 30 17:30:25 bastion LinuxCommandsWazuh: User ankur [4060427]: 845 exit Jan 30 17:30:56 bastion LinuxCommandsWazuh: User ankur [4060427]: 846 clickhouse-ssh Jan 30 17:31:04 bastion LinuxCommandsWazuh: User ankur [4060527]: 854 exit Jan 30 17:31:07 bastion LinuxCommandsWazuh: User ankur [4060527]: 854 exit Jan 30 17:52:06 bastion LinuxCommandsWazuh: User ankur [4063449]: 854 exit Jan 30 17:52:28 bastion LinuxCommandsWazuh: User ankur [4063561]: 854 exit Jan 30 17:52:43 bastion LinuxCommandsWazuh: User ankur [4063561]: 855 kubectl get pods | grep -i house Jan 30 17:54:42 bastion LinuxCommandsWazuh: User ankur [4063561]: 856 kubectl exec -it house-of-click-fbd46d58d-j8xbn -- bash Jan 30 18:03:52 bastion LinuxCommandsWazuh: User devesh [4064530]: 784 byobu Jan 30 18:06:20 bastion LinuxCommandsWazuh: User ankur [4063561]: 857 redis-cli Jan 30 18:06:40 bastion LinuxCommandsWazuh: User ankur [4063561]: 858 kubectl describe configmaps house-of-click-config Jan 30 18:07:45 bastion LinuxCommandsWazuh: User ankur [4063561]: 859 redis-cli Jan 30 18:08:28 bastion LinuxCommandsWazuh: User ankur [4063561]: 860 kubectl describe configmaps house-of-click-config Jan 30 18:13:47 bastion LinuxCommandsWazuh: User rihan [4064964]: 608 kubetail datapulse-celery-5bf4cff467-ddx9p Jan 30 18:24:10 bastion LinuxCommandsWazuh: User rihan [4065255]: 608 kubetail datapulse-celery-5bf4cff467-ddx9p Jan 30 18:28:17 bastion LinuxCommandsWazuh: User rihan [4065385]: 608 kubetail datapulse-celery-5bf4cff467-ddx9p Jan 30 18:29:18 bastion LinuxCommandsWazuh: User rihan [4064964]: 609 psql -d datapulse_v1 -U postgres Jan 30 18:29:21 bastion LinuxCommandsWazuh: User rihan [4064964]: 610 ls Jan 30 18:29:25 bastion LinuxCommandsWazuh: User rihan [4065385]: 609 scp -r rihan@10.8.0.1:~/dumps . Jan 30 18:29:27 bastion LinuxCommandsWazuh: User rihan [4065385]: 609 scp -r rihan@10.8.0.1:~/dumps . Jan 30 18:29:53 bastion LinuxCommandsWazuh: User rihan [4064964]: 611 psql -h 10.94.16.3 -p 5432 -U postgres -d datapulse_v1 -c "\COPY (SELECT * FROM product WHERE org_token = '5120ac14-7e25-40b8-af69-5da1e58a5df2') TO 'products_dump_zeroharm_30_01_2025.csv' WITH CSV HEADER" Jan 30 18:29:56 bastion LinuxCommandsWazuh: User rihan [4065385]: 609 scp -r rihan@10.8.0.1:~/dumps . Jan 30 18:30:07 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [4065385]: 609 scp -r rihan@10.8.0.1:~/dumps .] Jan 30 18:30:51 bastion LinuxCommandsWazuh: User rihan [4064964]: 612 ls -al Jan 30 18:31:08 bastion LinuxCommandsWazuh: User rihan [4064964]: 613 mkdir dumps Jan 30 18:31:11 bastion LinuxCommandsWazuh: User rihan [4064964]: 614 cd dumps/ Jan 30 18:31:17 bastion LinuxCommandsWazuh: User rihan [4064964]: 615 mv ../products_dump_zeroharm_30_01_2025.csv . Jan 30 18:37:10 bastion LinuxCommandsWazuh: User devesh [4065716]: 784 byobu Jan 30 18:37:18 bastion LinuxCommandsWazuh: User devesh [3830625]: 789 kubectl logs -f dramatiq-vortex-85b7745d69-kbzvz Jan 30 18:37:25 bastion LinuxCommandsWazuh: User devesh [3830625]: 790 kubectl get pods Jan 30 18:40:32 bastion LinuxCommandsWazuh: User rihan [4064964]: 616 ls Jan 30 18:40:35 bastion LinuxCommandsWazuh: User rihan [4064964]: 617 pwd Jan 30 18:41:16 bastion LinuxCommandsWazuh: User rihan [4064964]: 618 cd .. Jan 30 18:41:17 bastion LinuxCommandsWazuh: User rihan [4064964]: 619 ls Jan 30 18:41:53 bastion LinuxCommandsWazuh: User rihan [4064964]: 620 vim README.md Jan 30 18:42:05 bastion LinuxCommandsWazuh: User rihan [4064964]: 621 ls Jan 30 18:44:32 bastion LinuxCommandsWazuh: User venky [4073102]: 214 exit Jan 30 18:48:30 bastion LinuxCommandsWazuh: User rihan [4065255]: 609 internal Jan 30 18:59:40 bastion LinuxCommandsWazuh: User ankur [4063561]: 861 redis-cli Jan 30 19:28:58 bastion LinuxCommandsWazuh: User devesh [4114840]: 785 psql -U postgres Jan 30 19:39:25 bastion LinuxCommandsWazuh: User devesh [3830625]: 791 kubectl logs -f dramatiq-vortex-6cf7b44dbf-4vcf8 Jan 30 19:39:26 bastion LinuxCommandsWazuh: message repeated 158 times: [ User devesh [3830625]: 791 kubectl logs -f dramatiq-vortex-6cf7b44dbf-4vcf8] Jan 30 21:32:38 bastion LinuxCommandsWazuh: User devesh [4128056]: 786 byobu Jan 30 21:34:43 bastion LinuxCommandsWazuh: User devesh [3147561]: 736 kubectl get pods