May 13 12:57:22 bastion LinuxCommandsWazuh: User ankur [3920409]: 383 exit May 13 12:57:24 bastion LinuxCommandsWazuh: User ankur [3920409]: 384 ls May 13 13:02:35 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 521 exit May 13 13:02:48 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 522 kubectl get hpa May 13 13:03:06 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 522 kubectl get hpa May 13 13:06:22 bastion LinuxCommandsWazuh: User ankur [3920409]: 385 byobu May 13 13:41:22 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 522 kubectl get hpa May 13 13:41:26 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 523 clear May 13 13:41:27 bastion LinuxCommandsWazuh: User mohtashim [3925456]: 524 kubectl get hpa May 13 15:03:10 bastion LinuxCommandsWazuh: User adil [3939961]: 61 byobu May 13 15:03:13 bastion LinuxCommandsWazuh: User adil [3939961]: 62 ls May 13 15:03:15 bastion LinuxCommandsWazuh: User adil [3939961]: 63 ll May 13 15:06:25 bastion LinuxCommandsWazuh: User ankur [3940726]: 386 exit May 13 15:09:42 bastion LinuxCommandsWazuh: User ankur [294064]: 66 mongo May 13 15:19:31 bastion LinuxCommandsWazuh: User ankur [294064]: 66 mongo May 13 15:26:56 bastion LinuxCommandsWazuh: User adil [3939961]: 63 ll May 13 15:26:57 bastion LinuxCommandsWazuh: message repeated 4 times: [ User adil [3939961]: 63 ll] May 13 15:27:42 bastion LinuxCommandsWazuh: User adil [1331645]: 63 mongo May 13 15:28:03 bastion LinuxCommandsWazuh: message repeated 3 times: [ User adil [1331645]: 63 mongo] May 13 15:28:07 bastion LinuxCommandsWazuh: User adil [1331645]: 64 mongosh May 13 15:28:42 bastion LinuxCommandsWazuh: User adil [1331645]: 65 mongo May 13 15:28:47 bastion LinuxCommandsWazuh: User adil [3964707]: 61 byobu May 13 15:28:48 bastion LinuxCommandsWazuh: User adil [3964707]: 62 ls May 13 15:28:53 bastion LinuxCommandsWazuh: User adil [3964707]: 63 ls -la May 13 15:28:59 bastion LinuxCommandsWazuh: User adil [3965212]: 61 byobu May 13 15:29:03 bastion LinuxCommandsWazuh: User adil [3965212]: 62 mono May 13 15:29:22 bastion LinuxCommandsWazuh: User adil [3965212]: 63 mongo May 13 15:29:26 bastion LinuxCommandsWazuh: User adil [3965212]: 64 exity May 13 15:29:27 bastion LinuxCommandsWazuh: User adil [3965212]: 64 exity May 13 15:29:32 bastion LinuxCommandsWazuh: User adil [3939961]: 64 byobu May 13 15:29:32 bastion LinuxCommandsWazuh: User adil [3964707]: 64 byobu May 13 15:29:53 bastion LinuxCommandsWazuh: User adil [3964707]: 65 mongo May 13 15:29:58 bastion LinuxCommandsWazuh: User adil [3964707]: 66 ls May 13 15:30:00 bastion LinuxCommandsWazuh: User adil [3964707]: 67 ls -la May 13 15:30:08 bastion LinuxCommandsWazuh: User ubuntu [3967311]: 720 exit May 13 15:30:16 bastion LinuxCommandsWazuh: User ubuntu [3967311]: 721 mongo May 13 15:30:21 bastion LinuxCommandsWazuh: User rihan [3967514]: 36 psql -d vortex_v2 -U postgres May 13 15:30:23 bastion LinuxCommandsWazuh: User rihan [3967514]: 37 cd May 13 15:30:28 bastion LinuxCommandsWazuh: User rihan [3967514]: 38 mongo May 13 15:30:33 bastion LinuxCommandsWazuh: User rihan [3967514]: 39 cat .bashrc May 13 15:30:44 bastion LinuxCommandsWazuh: User ubuntu [3967311]: 722 sudo su rihan May 13 15:30:48 bastion LinuxCommandsWazuh: User ubuntu [3967311]: 723 sudo su adi; May 13 15:30:50 bastion LinuxCommandsWazuh: User adil [3968021]: 73 exit May 13 15:30:51 bastion LinuxCommandsWazuh: User adil [3968021]: 74 cd May 13 15:31:04 bastion LinuxCommandsWazuh: User adil [3968021]: 75 vi .bashrc May 13 15:31:08 bastion LinuxCommandsWazuh: User adil [3968021]: 76 source .bahsrc May 13 15:31:14 bastion LinuxCommandsWazuh: User adil [3968021]: 77 source .bashrc May 13 15:31:16 bastion LinuxCommandsWazuh: User ubuntu [3967311]: 724 sudo su adil May 13 15:31:21 bastion LinuxCommandsWazuh: User ubuntu [3968652]: 725 exit May 13 15:31:23 bastion LinuxCommandsWazuh: User adil [3968692]: 85 exit May 13 15:31:24 bastion LinuxCommandsWazuh: User adil [3968692]: 86 cd May 13 15:31:25 bastion LinuxCommandsWazuh: User adil [3968813]: 85 exit May 13 15:31:29 bastion LinuxCommandsWazuh: User adil [3968692]: 87 mongo May 13 15:31:30 bastion LinuxCommandsWazuh: User ubuntu [3968652]: 726 sudo su adil May 13 15:38:15 bastion LinuxCommandsWazuh: User ankur [3940726]: 387 byobu May 13 16:13:02 bastion LinuxCommandsWazuh: User adil [3968813]: 86 mongo May 13 16:14:51 bastion LinuxCommandsWazuh: User adil [3978238]: 1 byobu May 13 16:18:54 bastion LinuxCommandsWazuh: User adil [3978238]: 2 mongo May 13 16:18:54 bastion LinuxCommandsWazuh: User adil [3978238]: 2 mongo May 13 16:38:29 bastion LinuxCommandsWazuh: User adil [3978238]: 2 mongo May 13 18:36:29 bastion LinuxCommandsWazuh: User rihan [4120694]: 40 exit May 13 18:45:30 bastion LinuxCommandsWazuh: User rihan [4120694]: 41 psql May 13 18:45:34 bastion LinuxCommandsWazuh: User rihan [4120694]: 42 psql --version May 13 19:19:30 bastion LinuxCommandsWazuh: User rihan [4120694]: 43 psql May 13 19:21:06 bastion LinuxCommandsWazuh: User ubuntu [4140263]: 727 exit May 13 19:21:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [4140263]: 727 exit] May 13 19:21:17 bastion LinuxCommandsWazuh: User ubuntu [4140263]: 728 psql -h 34.131.118.186 May 13 19:21:24 bastion LinuxCommandsWazuh: User rihan [4140370]: 43 psql May 13 19:21:46 bastion LinuxCommandsWazuh: User ubuntu [4140263]: 729 psql -h 34.131.118.186 -d nitrox_v2 May 13 19:22:19 bastion LinuxCommandsWazuh: User ubuntu [4140263]: 730 psql -h 34.131.118.186 -d nitrox_v2 -U dbuser May 13 19:24:06 bastion LinuxCommandsWazuh: User rihan [4140370]: 44 psql -h 34.131.118.186 May 13 19:24:45 bastion LinuxCommandsWazuh: User rihan [4140370]: 45 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 May 13 19:24:45 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [4140370]: 45 psql -h 34.131.118.186 -U dbuser -d nitrox_v2] May 13 19:29:26 bastion LinuxCommandsWazuh: User rihan [4140370]: 45 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 May 13 19:29:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [4140370]: 45 psql -h 34.131.118.186 -U dbuser -d nitrox_v2] May 13 19:30:36 bastion LinuxCommandsWazuh: User ubuntu [4141268]: 731 exit May 13 19:30:49 bastion LinuxCommandsWazuh: User ubuntu [4141268]: 732 psql -h 34.131.118.186 May 13 19:32:27 bastion LinuxCommandsWazuh: User ubuntu [4141394]: 733 exit May 13 19:32:37 bastion LinuxCommandsWazuh: User ubuntu [4141394]: 734 psql -h 34.131.118.186 May 13 19:32:43 bastion LinuxCommandsWazuh: User rihan [4141492]: 45 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 May 13 19:33:09 bastion LinuxCommandsWazuh: User rihan [4141492]: 46 psql -h 34.131.118.186 May 13 19:35:00 bastion LinuxCommandsWazuh: User rihan [4141492]: 46 psql -h 34.131.118.186 May 13 19:36:07 bastion LinuxCommandsWazuh: User rihan [4141492]: 46 psql -h 34.131.118.186 May 13 19:37:00 bastion LinuxCommandsWazuh: User rihan [4141492]: 46 psql -h 34.131.118.186 May 13 19:37:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [4141492]: 46 psql -h 34.131.118.186 ] May 13 19:37:02 bastion LinuxCommandsWazuh: User rihan [4141492]: 47 ll May 13 19:37:05 bastion LinuxCommandsWazuh: User rihan [4141492]: 48 cd dumps/ May 13 19:37:06 bastion LinuxCommandsWazuh: User rihan [4141492]: 49 ll May 13 19:37:15 bastion LinuxCommandsWazuh: User rihan [4141492]: 50 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 -c "\COPY (SELECT id,password,last_login,is_superuser,username,first_name,last_name,email,is_staff,is_active,date_joined FROM auth_user) TO 'users.csv' WITH CSV HEADER" May 13 19:38:50 bastion LinuxCommandsWazuh: User rihan [4141492]: 51 psql -h 10.94.16.3 -U dbuser -d nitrox_v2 -c "\COPY auth_user(id,password,last_login,is_superuser,username,first_name,last_name,email,is_staff,is_active,date_joined) FROM 'users.csv' WITH CSV HEADER" May 13 19:40:38 bastion LinuxCommandsWazuh: User rihan [4141492]: 52 psql -h 10.94.16.3 -U dbuser -d nitrox_v2 -c "\COPY (SELECT id,password,last_login,is_superuser,username,first_name,last_name,email,is_staff,is_active,date_joined FROM auth_user) TO 'users_real.csv' WITH CSV HEADER" May 13 19:42:42 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1577 k logs -f 'cookie-cutter-69dcb7c44d-dbjxd' | grep Pixel May 13 19:42:43 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1577 k logs -f 'cookie-cutter-69dcb7c44d-dbjxd' | grep Pixel May 13 19:42:44 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1578 ls May 13 19:43:10 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1579 psql -h 10.94.16.3 -d analytics_01 -U postgres May 13 19:43:32 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1580 psql -h 10.94.16.3 -d analytics_01 -U dbuser May 13 19:43:34 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1580 psql -h 10.94.16.3 -d analytics_01 -U dbuser May 13 19:44:15 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1581 ls May 13 19:44:41 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1582 pip3 install psycopg2 May 13 19:44:46 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1583 cat > fix.py May 13 19:44:47 bastion LinuxCommandsWazuh: User rihan [4141492]: 53 psql May 13 19:44:52 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1584 vi fix.py May 13 19:44:56 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1584 vi fix.py May 13 19:45:05 bastion LinuxCommandsWazuh: User rihan [4141492]: 54 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 -c "\COPY (SELECT id,email FROM auth_user) TO 'users_id_emails.csv' WITH CSV HEADER" May 13 19:45:10 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1584 vi fix.py May 13 19:45:27 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1584 vi fix.py May 13 19:45:29 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1585 python3 fix.py May 13 19:45:36 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1586 vi fix.py May 13 19:46:10 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1586 vi fix.py May 13 19:46:12 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1587 python3 fix.py May 13 19:46:35 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1588 vi fix.py May 13 19:46:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [4142581]: 1588 vi fix.py ] May 13 19:46:49 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1589 python3 fix.py May 13 19:47:06 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1590 vi fix.py May 13 19:47:37 bastion LinuxCommandsWazuh: message repeated 3 times: [ User shamailtayyab [4142581]: 1590 vi fix.py ] May 13 19:48:30 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1590 vi fix.py May 13 19:48:32 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1591 python3 fix.py May 13 19:48:40 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1592 vi fix.py May 13 19:48:41 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1593 python3 fix.py May 13 19:48:48 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1594 vi fix.py May 13 19:48:48 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1595 python3 fix.py May 13 19:49:31 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1596 vi fix.py May 13 19:49:32 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1597 python3 fix.py May 13 19:49:42 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1598 vi fix.py May 13 19:49:43 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1599 python3 fix.py May 13 19:49:49 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1600 vi fix.py May 13 19:49:50 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1601 python3 fix.py May 13 19:50:04 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1602 vi fix.py May 13 19:50:19 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1603 python3 fix.py May 13 19:50:23 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1604 vi fix.py May 13 19:50:25 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1605 python3 fix.py May 13 19:51:10 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1606 vi fix.py May 13 19:51:21 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1606 vi fix.py May 13 19:51:25 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1606 vi fix.py May 13 19:51:36 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1606 vi fix.py May 13 19:52:00 bastion LinuxCommandsWazuh: User shamailtayyab [4142581]: 1606 vi fix.py May 13 19:52:46 bastion LinuxCommandsWazuh: message repeated 7 times: [ User shamailtayyab [4142581]: 1606 vi fix.py ] May 13 19:55:46 bastion LinuxCommandsWazuh: User rihan [4141492]: 55 psql May 13 19:58:57 bastion LinuxCommandsWazuh: User ubuntu [4141394]: 734 psql -h 34.131.118.186 May 13 19:58:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [4141394]: 734 psql -h 34.131.118.186 ] May 13 20:01:13 bastion LinuxCommandsWazuh: User rihan [4144827]: 55 psql May 13 20:02:19 bastion LinuxCommandsWazuh: User rihan [4144827]: 56 psql -h 34.131.118.186 -U dbuser -d nitrox_v2 -c "\COPY (SELECT id,username,email FROM auth_user) TO 'users_id_username_emails.csv' WITH CSV HEADER"