Apr 18 03:31:40 bastion LinuxCommandsWazuh: User venky [3735163]: 511 byobu Apr 18 03:32:00 bastion LinuxCommandsWazuh: User venky [3735563]: 511 byobu Apr 18 03:32:04 bastion LinuxCommandsWazuh: User venky [3735563]: 511 byobu Apr 18 03:32:22 bastion LinuxCommandsWazuh: User venky [3735563]: 512 psql -U dbuser -d nitrox_v2 Apr 18 03:32:24 bastion LinuxCommandsWazuh: User venky [3735942]: 512 psql -U dbuser -d nitrox_v2 Apr 18 13:22:19 bastion LinuxCommandsWazuh: User rihan [3847010]: 884 make nitrox-bash Apr 18 13:22:58 bastion LinuxCommandsWazuh: User rihan [3847010]: 884 make nitrox-bash Apr 18 13:33:20 bastion LinuxCommandsWazuh: User rihan [3847010]: 885 byobu Apr 18 13:55:51 bastion LinuxCommandsWazuh: User ubuntu [3879744]: 544 exit Apr 18 13:55:56 bastion LinuxCommandsWazuh: User ubuntu [446226]: 797 ls Apr 18 13:55:57 bastion LinuxCommandsWazuh: User ubuntu [446226]: 798 cd Apr 18 13:55:58 bastion LinuxCommandsWazuh: User ubuntu [446226]: 799 ls Apr 18 13:56:01 bastion LinuxCommandsWazuh: User ubuntu [446226]: 800 deactivate Apr 18 13:56:03 bastion LinuxCommandsWazuh: User ubuntu [446226]: 801 df -h Apr 18 14:12:54 bastion LinuxCommandsWazuh: User devesh [3911386]: 1148 kubectl logs -f cookie-cutter-queues-5bcf6545dc-vc5j2 | grep -i "bob.py" Apr 18 14:32:22 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 544 exit Apr 18 14:32:24 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 545 df -h Apr 18 14:33:48 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 546 lsblk Apr 18 14:36:27 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 544 exit Apr 18 14:36:27 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 545 ls Apr 18 14:36:32 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 546 cd DK Apr 18 14:36:33 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 547 ls Apr 18 14:37:01 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 548 vim customers.py Apr 18 14:37:07 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ubuntu [3977016]: 548 vim customers.py ] Apr 18 14:49:14 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 548 vim customers.py Apr 18 14:49:15 bastion LinuxCommandsWazuh: User ubuntu [3977016]: 549 ls Apr 18 15:07:11 bastion LinuxCommandsWazuh: User ankur [4061119]: 1074 psql Apr 18 15:30:34 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 547 cd /m Apr 18 15:30:36 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 548 ls Apr 18 15:30:38 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 549 cd Apr 18 15:30:39 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 550 cd / Apr 18 15:30:40 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 551 la Apr 18 15:30:45 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 552 cd mnt/ Apr 18 15:30:46 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 553 ls Apr 18 15:30:47 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 554 ll Apr 18 15:30:48 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 555 cd .. Apr 18 15:30:48 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 556 ls Apr 18 15:31:20 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 557 mount /dev/sdb /mnt/ Apr 18 15:31:23 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 558 sudo mount /dev/sdb /mnt/ Apr 18 15:31:26 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 559 cd /mnt/ Apr 18 15:31:26 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 560 ls Apr 18 15:31:29 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 561 cd backup/ Apr 18 15:31:29 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 562 ls Apr 18 15:31:32 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 563 cd stalker/ Apr 18 15:31:33 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 564 ls Apr 18 15:31:33 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 565 l Apr 18 15:31:34 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 566 ll Apr 18 15:31:36 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 567 cd .. Apr 18 15:31:36 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 568 ls Apr 18 15:31:37 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 569 cd .. Apr 18 15:31:37 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 570 ls Apr 18 15:31:41 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 571 cd analytics-01/ Apr 18 15:31:42 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 572 ls Apr 18 15:31:43 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 573 cd .. Apr 18 15:31:44 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 574 ls Apr 18 15:31:52 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 575 df -h Apr 18 15:48:51 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 576 s Apr 18 15:48:52 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 577 ls Apr 18 15:48:56 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 578 mongosh Apr 18 15:49:47 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 579 ls Apr 18 15:49:51 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 580 mkdir mongo Apr 18 15:49:53 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 581 cd mongo/ Apr 18 15:49:56 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 582 cim data.sh Apr 18 15:50:50 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 583 vim data.sh Apr 18 15:50:58 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 584 sudo chmod +x data.sh Apr 18 15:51:48 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 585 vim orgs.json Apr 18 15:51:51 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 586 ./data.sh Apr 18 15:52:07 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 587 vim data.sh Apr 18 15:52:08 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 588 ./data.sh Apr 18 15:56:17 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 589 mv data.sh export_parents.py Apr 18 15:56:31 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 590 vim export_parents.py Apr 18 15:56:37 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 591 chmod +x export_parents.py Apr 18 15:57:24 bastion LinuxCommandsWazuh: User ubuntu [6513]: 544 exit Apr 18 15:57:31 bastion LinuxCommandsWazuh: User ubuntu [446226]: 802 cd /m Apr 18 15:57:34 bastion LinuxCommandsWazuh: User ubuntu [446226]: 803 cd /mnt/ Apr 18 15:57:35 bastion LinuxCommandsWazuh: User ubuntu [446226]: 804 ls Apr 18 15:57:38 bastion LinuxCommandsWazuh: User ubuntu [446226]: 805 cd mongo/ Apr 18 15:57:38 bastion LinuxCommandsWazuh: User ubuntu [446226]: 806 ls Apr 18 15:57:43 bastion LinuxCommandsWazuh: User ubuntu [446226]: 807 ll Apr 18 15:57:46 bastion LinuxCommandsWazuh: User ubuntu [446226]: 808 cd nitro_ids_donwload/ Apr 18 15:57:46 bastion LinuxCommandsWazuh: User ubuntu [446226]: 809 ls Apr 18 15:57:47 bastion LinuxCommandsWazuh: User ubuntu [446226]: 810 ll Apr 18 15:58:02 bastion LinuxCommandsWazuh: User ubuntu [446226]: 811 vim org_0bba6215-574f-4441-be1d-825659924c48_parents.csv Apr 18 15:58:05 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 592 python3 export_parents.py Apr 18 15:58:34 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 593 ping 34.131.172.123 Apr 18 15:59:29 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 594 vim export_parents.py Apr 18 16:00:03 bastion LinuxCommandsWazuh: User ubuntu [446226]: 812 ll Apr 18 16:00:05 bastion LinuxCommandsWazuh: User ubuntu [446226]: 813 cd .. Apr 18 16:00:05 bastion LinuxCommandsWazuh: User ubuntu [446226]: 814 ls Apr 18 16:00:08 bastion LinuxCommandsWazuh: User ubuntu [446226]: 815 cd nitro_ids_donwload/ Apr 18 16:00:10 bastion LinuxCommandsWazuh: User ubuntu [446226]: 816 ls Apr 18 16:00:10 bastion LinuxCommandsWazuh: User ubuntu [446226]: 817 ll Apr 18 16:00:11 bastion LinuxCommandsWazuh: User ubuntu [446226]: 818 l Apr 18 16:00:11 bastion LinuxCommandsWazuh: User ubuntu [446226]: 818 l Apr 18 16:00:12 bastion LinuxCommandsWazuh: User ubuntu [446226]: 819 ll Apr 18 16:00:12 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 595 python3 export_parents.py Apr 18 16:00:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3965294]: 595 python3 export_parents.py] Apr 18 16:00:46 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 596 ping -c 4 34.131.172.123 Apr 18 16:00:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3965294]: 596 ping -c 4 34.131.172.123] Apr 18 16:00:48 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 597 mongosh Apr 18 16:00:58 bastion LinuxCommandsWazuh: User ubuntu [446226]: 819 ll Apr 18 16:00:58 bastion LinuxCommandsWazuh: User ubuntu [446226]: 819 ll Apr 18 16:00:59 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 597 mongosh Apr 18 16:01:00 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [3965294]: 597 mongosh] Apr 18 16:01:21 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 598 vim export_parents.py Apr 18 16:01:30 bastion LinuxCommandsWazuh: User ubuntu [446226]: 819 ll Apr 18 16:01:33 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ubuntu [446226]: 819 ll] Apr 18 16:01:34 bastion LinuxCommandsWazuh: User ubuntu [446226]: 820 ls Apr 18 16:01:35 bastion LinuxCommandsWazuh: User ubuntu [446226]: 821 cd .. Apr 18 16:01:35 bastion LinuxCommandsWazuh: User ubuntu [446226]: 822 ls Apr 18 16:01:39 bastion LinuxCommandsWazuh: User ubuntu [446226]: 823 cd nitro_ids_donwload/ Apr 18 16:01:40 bastion LinuxCommandsWazuh: User ubuntu [446226]: 824 ll Apr 18 16:01:40 bastion LinuxCommandsWazuh: User ubuntu [446226]: 825 l Apr 18 16:01:51 bastion LinuxCommandsWazuh: User ubuntu [446226]: 826 vim org_0bba6215-574f-4441-be1d-825659924c48_parents.csv Apr 18 16:02:16 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 599 python3 export_parents.py Apr 18 16:02:16 bastion LinuxCommandsWazuh: User ubuntu [3965294]: 599 python3 export_parents.py Apr 18 16:02:30 bastion LinuxCommandsWazuh: User ubuntu [447389]: 539 psql -h 10.94.16.3 -d datapulse_v1 -U postgres Apr 18 16:02:36 bastion LinuxCommandsWazuh: User ubuntu [446226]: 827 ls Apr 18 16:02:38 bastion LinuxCommandsWazuh: User ubuntu [446226]: 828 ll Apr 18 16:02:46 bastion LinuxCommandsWazuh: User ubuntu [446226]: 829 rm org_0bba6215-574f-4441-be1d-825659924c48_parents.csv org_c18a6825-abc8-4af0-8068-842c4a24fe44_parents.csv Apr 18 16:02:49 bastion LinuxCommandsWazuh: User ubuntu [446226]: 830 cd .. Apr 18 16:02:49 bastion LinuxCommandsWazuh: User ubuntu [446226]: 831 ls Apr 18 16:02:57 bastion LinuxCommandsWazuh: User ubuntu [6513]: 545 byobu Apr 18 16:03:02 bastion LinuxCommandsWazuh: User ubuntu [446226]: 832 python3 Apr 18 16:09:52 bastion LinuxCommandsWazuh: User ubuntu [447389]: 540 ls Apr 18 16:09:57 bastion LinuxCommandsWazuh: User ubuntu [447389]: 541 cd /mnt/ Apr 18 16:09:58 bastion LinuxCommandsWazuh: User ubuntu [447389]: 542 ls Apr 18 16:10:00 bastion LinuxCommandsWazuh: User ubuntu [447389]: 543 cd backup/ Apr 18 16:10:04 bastion LinuxCommandsWazuh: User ubuntu [447389]: 544 cd ../mongo/ Apr 18 16:10:04 bastion LinuxCommandsWazuh: User ubuntu [447389]: 545 ls Apr 18 16:10:10 bastion LinuxCommandsWazuh: User ubuntu [447389]: 546 cd nitro_ids_donwload/ Apr 18 16:10:10 bastion LinuxCommandsWazuh: User ubuntu [447389]: 547 ls Apr 18 16:10:11 bastion LinuxCommandsWazuh: User ubuntu [447389]: 548 ll Apr 18 16:10:13 bastion LinuxCommandsWazuh: User ubuntu [447389]: 549 ll -h Apr 18 16:23:15 bastion LinuxCommandsWazuh: User rihan [600257]: 834 make nitrox-bash Apr 18 16:32:30 bastion LinuxCommandsWazuh: User devesh [131514]: 1149 byobu Apr 18 16:32:36 bastion LinuxCommandsWazuh: User devesh [131514]: 1150 kubectl get pods Apr 18 16:32:42 bastion LinuxCommandsWazuh: User devesh [131514]: 1151 kubectl get pods | grep jobs Apr 18 16:33:03 bastion LinuxCommandsWazuh: User devesh [131514]: 1152 kubectl logs -f cookie-cutter-jobs-5f786dbd6c-csjl2 Apr 18 16:33:09 bastion LinuxCommandsWazuh: User devesh [131514]: 1152 kubectl logs -f cookie-cutter-jobs-5f786dbd6c-csjl2 Apr 18 16:33:10 bastion LinuxCommandsWazuh: message repeated 4 times: [ User devesh [131514]: 1152 kubectl logs -f cookie-cutter-jobs-5f786dbd6c-csjl2] Apr 18 16:33:15 bastion LinuxCommandsWazuh: User devesh [283275]: 1122 psql Apr 18 17:02:06 bastion LinuxCommandsWazuh: User devesh [283275]: 1123 kubectl logs -f cookie-cutter-jobs-5f786dbd6c-csjl2 Apr 18 17:02:06 bastion LinuxCommandsWazuh: message repeated 24 times: [ User devesh [283275]: 1123 kubectl logs -f cookie-cutter-jobs-5f786dbd6c-csjl2] Apr 18 18:01:26 bastion LinuxCommandsWazuh: User devesh [283275]: 1124 curl 'https://links-be.nitrocommerce.ai/v1/rest/organisations/list' --compressed -H 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0' -H 'Accept: application/json, text/plain, */*' -H 'Accept-Language: en-US,en;q=0.5' -H 'Accept-Encoding: gzip, deflate, br, zstd' -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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 Apr 18 18:19:33 bastion LinuxCommandsWazuh: User mohtashim [608187]: 586 exit Apr 18 18:19:43 bastion LinuxCommandsWazuh: User mohtashim [608187]: 587 kubectl get pods Apr 18 18:22:32 bastion LinuxCommandsWazuh: User mohtashim [608187]: 588 kubectl get hpa Apr 18 18:23:01 bastion LinuxCommandsWazuh: User mohtashim [608187]: 588 kubectl get hpa Apr 18 18:23:45 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [608187]: 588 kubectl get hpa] Apr 18 18:23:49 bastion LinuxCommandsWazuh: User mohtashim [608187]: 589 kubectl get pods Apr 18 18:25:53 bastion LinuxCommandsWazuh: User mohtashim [608187]: 590 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 18 18:28:21 bastion LinuxCommandsWazuh: User ankur [4061119]: 1075 byobu Apr 18 18:31:08 bastion LinuxCommandsWazuh: User mohtashim [608187]: 590 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 18 18:49:55 bastion LinuxCommandsWazuh: User ankur [724590]: 1076 exit Apr 18 18:50:13 bastion LinuxCommandsWazuh: User ankur [724590]: 1077 kubectl get pods | grep -i dakiya Apr 18 18:50:13 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [724590]: 1077 kubectl get pods | grep -i dakiya] Apr 18 18:50:58 bastion LinuxCommandsWazuh: User ankur [440589]: 1043 kubectl get pods | grep -i dakiya Apr 18 18:51:07 bastion LinuxCommandsWazuh: User ankur [440589]: 1044 kubectl logs -f dakiya-65dc4bbfc4-7hfmp Apr 18 18:51:07 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [440589]: 1044 kubectl logs -f dakiya-65dc4bbfc4-7hfmp] Apr 18 18:51:07 bastion LinuxCommandsWazuh: User ankur [440589]: 1044 kubectl logs -f dakiya-65dc4bbfc4-7hfmp Apr 18 18:51:13 bastion LinuxCommandsWazuh: User ankur [440589]: 1045 kubectl get pods | grep -i nitrox Apr 18 18:51:36 bastion LinuxCommandsWazuh: User ankur [440589]: 1046 kubectl logs -f nitrox-dramatiq-85b69d588b-r45cv Apr 18 18:51:36 bastion LinuxCommandsWazuh: User ankur [440589]: 1046 kubectl logs -f nitrox-dramatiq-85b69d588b-r45cv Apr 18 18:51:37 bastion LinuxCommandsWazuh: User ankur [440589]: 1046 kubectl logs -f nitrox-dramatiq-85b69d588b-r45cv Apr 18 18:51:37 bastion LinuxCommandsWazuh: User ankur [440589]: 1046 kubectl logs -f nitrox-dramatiq-85b69d588b-r45cv Apr 18 18:51:38 bastion LinuxCommandsWazuh: User ankur [724590]: 1078 byobu Apr 18 19:00:01 bastion LinuxCommandsWazuh: User venky [762091]: 512 psql -U dbuser -d nitrox_v2 Apr 18 19:00:03 bastion LinuxCommandsWazuh: User venky [762091]: 512 psql -U dbuser -d nitrox_v2 Apr 18 19:00:03 bastion LinuxCommandsWazuh: User venky [762091]: 512 psql -U dbuser -d nitrox_v2 Apr 18 19:03:43 bastion LinuxCommandsWazuh: User venky [762091]: 513 psql -U postgres -d datapulse_v1 -h 10.94.16.3 Apr 18 19:03:44 bastion LinuxCommandsWazuh: User venky [762091]: 514 ls Apr 18 19:03:50 bastion LinuxCommandsWazuh: User ubuntu [775550]: 544 exit Apr 18 19:03:51 bastion LinuxCommandsWazuh: User ubuntu [775550]: 545 ls Apr 18 19:03:55 bastion LinuxCommandsWazuh: User ubuntu [775550]: 546 cd DK Apr 18 19:03:56 bastion LinuxCommandsWazuh: User ubuntu [775550]: 547 ls Apr 18 19:04:02 bastion LinuxCommandsWazuh: User ubuntu [775550]: 548 vim customer. Apr 18 19:06:01 bastion LinuxCommandsWazuh: User ubuntu [775550]: 549 vim customers.py Apr 18 19:06:02 bastion LinuxCommandsWazuh: User ubuntu [775550]: 550 ls Apr 18 19:06:25 bastion LinuxCommandsWazuh: User ubuntu [775550]: 551 vim pincodes.csv Apr 18 19:06:33 bastion LinuxCommandsWazuh: User ubuntu [775550]: 552 source env/bin/activate Apr 18 19:06:35 bastion LinuxCommandsWazuh: User ubuntu [775550]: 553 ls Apr 18 19:06:40 bastion LinuxCommandsWazuh: User ubuntu [775550]: 553 ls Apr 18 19:10:41 bastion LinuxCommandsWazuh: User ubuntu [775550]: 554 vim customers.py Apr 18 19:10:45 bastion LinuxCommandsWazuh: User ubuntu [775550]: 555 ls Apr 18 19:11:43 bastion LinuxCommandsWazuh: User ubuntu [775550]: 556 python3 customers.py Apr 18 19:11:59 bastion LinuxCommandsWazuh: User ubuntu [775550]: 557 deactivate Apr 18 19:12:01 bastion LinuxCommandsWazuh: User ubuntu [775550]: 558 cd Apr 18 19:12:05 bastion LinuxCommandsWazuh: User ubuntu [805101]: 544 exit Apr 18 19:12:13 bastion LinuxCommandsWazuh: User ubuntu [805101]: 545 byobu Apr 18 19:12:46 bastion LinuxCommandsWazuh: User ubuntu [805101]: 546 ls Apr 18 19:14:41 bastion LinuxCommandsWazuh: User ubuntu [805101]: 546 ls Apr 18 19:14:54 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [805101]: 546 ls] Apr 18 19:14:57 bastion LinuxCommandsWazuh: User ubuntu [805101]: 547 cd DK Apr 18 19:15:14 bastion LinuxCommandsWazuh: User ubuntu [805101]: 548 ls Apr 18 19:15:41 bastion LinuxCommandsWazuh: User ubuntu [805101]: 549 vim pincodes.csv