Jul 7 12:14:45 bastion LinuxCommandsWazuh: User ankur [3365691]: 828 byobu Jul 7 12:31:16 bastion LinuxCommandsWazuh: User rihan [3382683]: 1091 mongo Jul 7 12:32:28 bastion LinuxCommandsWazuh: User rihan [3382683]: 1091 mongo Jul 7 12:38:00 bastion LinuxCommandsWazuh: User rihan [3389787]: 1091 mongo Jul 7 12:39:21 bastion LinuxCommandsWazuh: User rihan [3389787]: 1091 mongo Jul 7 12:48:11 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 300 exit Jul 7 12:48:13 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 301 ls Jul 7 12:48:26 bastion abhijeet: root@ [3400396]: exit [0] Jul 7 12:48:30 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 302 sudo su Jul 7 12:48:39 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 303 kubectl get al Jul 7 12:48:42 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 304 kubectl get all Jul 7 12:48:58 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 305 kubectl get namespaces Jul 7 12:49:10 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 306 kubectlget all -n loki Jul 7 12:49:15 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 307 kubectl get all -n loki Jul 7 12:49:26 bastion LinuxCommandsWazuh: User rihan [3401530]: 1091 mongo Jul 7 12:50:14 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 308 ls Jul 7 12:50:21 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 309 wget https://get.helm.sh/helm-v3.18.3-linux-amd64.tar.gz Jul 7 12:50:22 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 310 ls Jul 7 12:50:31 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 311 tar -xvf helm-v3.18.3-linux-amd64.tar.gz Jul 7 12:50:32 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 312 ls Jul 7 12:50:39 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 313 ./linux-amd64/helm Jul 7 12:50:41 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 314 ./linux-amd64/helm list Jul 7 12:50:46 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 315 ./linux-amd64/helm list -n loki Jul 7 12:50:50 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 315 ./linux-amd64/helm list -n loki Jul 7 12:53:26 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 316 ./linux-amd64/helm ls -n loki Jul 7 12:53:31 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 316 ./linux-amd64/helm ls -n loki Jul 7 12:54:58 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 317 ./linux-amd64/helm get value loki -n loki Jul 7 12:55:16 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 318 ./linux-amd64/helm get values loki -n loki Jul 7 12:55:19 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 318 ./linux-amd64/helm get values loki -n loki Jul 7 12:58:45 bastion LinuxCommandsWazuh: User adil [3411165]: 153 mongo pixel_v1 Jul 7 13:06:13 bastion LinuxCommandsWazuh: User ankur [3418868]: 828 byobu Jul 7 13:07:09 bastion LinuxCommandsWazuh: User ankur [3418868]: 829 psql Jul 7 13:07:26 bastion LinuxCommandsWazuh: User ankur [3418868]: 830 psql -U postgres Jul 7 13:20:26 bastion LinuxCommandsWazuh: User ashish [3433134]: 113 redis Jul 7 13:20:28 bastion LinuxCommandsWazuh: User ashish [3433134]: 114 clear Jul 7 13:24:23 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 319 ./linux-amd64/helm get values promtail -n loki Jul 7 13:28:01 bastion LinuxCommandsWazuh: User rihan [3401530]: 1091 mongo Jul 7 13:28:40 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 320 ./linux-amd64/helm list -a Jul 7 13:28:44 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 321 ./linux-amd64/helm list -A Jul 7 13:32:49 bastion LinuxCommandsWazuh: User ashish [3433134]: 115 mongo Jul 7 13:33:37 bastion LinuxCommandsWazuh: User rihan [3446230]: 1091 mongo Jul 7 13:33:40 bastion LinuxCommandsWazuh: User rihan [3446230]: 1092 clickhouse-ssh Jul 7 13:33:46 bastion LinuxCommandsWazuh: User ubuntu [3446409]: 1663 exit Jul 7 13:33:52 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 322 kubectl get pods -n loki Jul 7 13:34:06 bastion LinuxCommandsWazuh: User rihan [3446804]: 1091 mongo Jul 7 13:34:17 bastion LinuxCommandsWazuh: User ubuntu [3446987]: 1663 exit Jul 7 13:34:22 bastion LinuxCommandsWazuh: User ubuntu [3446987]: 1663 exit Jul 7 13:34:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [3446987]: 1663 exit] Jul 7 13:34:24 bastion LinuxCommandsWazuh: User rihan [3446804]: 1092 sudo su ubuntu Jul 7 13:34:46 bastion LinuxCommandsWazuh: User rihan [3446804]: 1093 clickhouse-client -d analytics Jul 7 13:38:02 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 323 ls Jul 7 13:38:04 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 324 ifconfig Jul 7 13:38:12 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 325 ifconfig | grep inet Jul 7 13:39:57 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 326 ssh ubuntu@34.131.223.232 Jul 7 13:40:05 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 327 cd /home/ubuntu/ Jul 7 13:40:06 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 328 ls Jul 7 13:40:14 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 329 ssh ubuntu@34.131.223.232 Jul 7 13:40:47 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 330 su ubuntu Jul 7 13:40:55 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 331 cat .ssh/ Jul 7 13:41:04 bastion LinuxCommandsWazuh: User ubuntu [3454316]: 1663 exit Jul 7 13:41:12 bastion LinuxCommandsWazuh: User ubuntu [3454316]: 1664 cat .ssh/id_rsa Jul 7 13:41:14 bastion LinuxCommandsWazuh: User ubuntu [3454316]: 1665 cat .ssh/id_rsa.pub Jul 7 13:42:52 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 332 sudo su ubuntu Jul 7 13:42:54 bastion LinuxCommandsWazuh: User ubuntu [3456026]: 1666 exit Jul 7 13:43:18 bastion LinuxCommandsWazuh: User ubuntu [3456026]: 1667 ssh ubuntu@34.131.223.232 Jul 7 13:43:47 bastion LinuxCommandsWazuh: User rihan [3456955]: 1095 clickhouse-client -d analytics Jul 7 13:43:53 bastion LinuxCommandsWazuh: User ubuntu [3457058]: 1666 exit Jul 7 13:44:39 bastion LinuxCommandsWazuh: User ubuntu [3457058]: 1667 vim ~.bashrc Jul 7 13:44:41 bastion LinuxCommandsWazuh: User rihan [3456955]: 1096 sudo su ubuntu Jul 7 13:44:58 bastion LinuxCommandsWazuh: User rihan [3456955]: 1096 sudo su ubuntu Jul 7 13:44:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [3456955]: 1096 sudo su ubuntu] Jul 7 13:46:26 bastion LinuxCommandsWazuh: User ubuntu [3456026]: 1668 ls Jul 7 13:46:32 bastion LinuxCommandsWazuh: User rihan [3456955]: 1097 tail -30 ~/.bashrc Jul 7 13:46:51 bastion LinuxCommandsWazuh: User rihan [3456955]: 1097 tail -30 ~/.bashrc Jul 7 13:46:56 bastion LinuxCommandsWazuh: User ubuntu [3460666]: 1667 vim ~.bashrc Jul 7 13:51:45 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 332 sudo su ubuntu Jul 7 13:51:55 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 333 kubectl get ns Jul 7 13:52:06 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 334 kubectl get all -n nitrox-production Jul 7 13:53:44 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 335 kubectl get all -n nitrox-production | more Jul 7 13:53:45 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 336 ls Jul 7 13:53:55 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1670 exit Jul 7 13:53:58 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1671 ls Jul 7 13:54:01 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1672 l Jul 7 13:54:03 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1673 ll Jul 7 13:54:26 bastion LinuxCommandsWazuh: User ayush [3467775]: 206 exit Jul 7 13:55:37 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1674 vim .bashrc Jul 7 13:57:11 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1675 nslookup stage-cc.getnitro.co.in Jul 7 13:57:16 bastion LinuxCommandsWazuh: User ubuntu [3467156]: 1675 nslookup stage-cc.getnitro.co.in Jul 7 13:58:01 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 337 sudo su ubuntu Jul 7 13:58:13 bastion LinuxCommandsWazuh: User ubuntu [3471998]: 1676 exit Jul 7 13:58:25 bastion LinuxCommandsWazuh: User ubuntu [3471998]: 1677 cat .bashrc Jul 7 13:58:30 bastion LinuxCommandsWazuh: User ubuntu [3471998]: 1678 cat .bashrc | grep stage Jul 7 13:58:48 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 337 sudo su ubuntu Jul 7 14:01:53 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 338 internal-server Jul 7 14:02:44 bastion LinuxCommandsWazuh: User abhijeet [3400144]: 339 ssh ubuntu@34.131.126.168 Jul 7 14:21:36 bastion LinuxCommandsWazuh: User ashish [3495338]: 115 mongo Jul 7 14:50:25 bastion LinuxCommandsWazuh: User ashish [3524200]: 115 mongo Jul 7 14:50:25 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [3524200]: 115 mongo] Jul 7 15:02:58 bastion LinuxCommandsWazuh: User ashish [3524200]: 115 mongo Jul 7 15:02:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [3524200]: 115 mongo] Jul 7 15:03:16 bastion LinuxCommandsWazuh: User ashish [3536973]: 115 mongo Jul 7 15:22:34 bastion LinuxCommandsWazuh: User ashish [3536973]: 115 mongo Jul 7 15:22:34 bastion LinuxCommandsWazuh: User ashish [3536973]: 115 mongo Jul 7 15:23:06 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 340 exit Jul 7 15:23:07 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 341 l Jul 7 15:23:22 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 342 mv linux-amd64/helm . Jul 7 15:23:23 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 343 ls Jul 7 15:23:46 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 344 ./helm list -a Jul 7 15:23:51 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 345 ./helm list -a -n loki Jul 7 15:23:55 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 346 ls Jul 7 15:23:59 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 347 rm -rf linux-amd64/ Jul 7 15:24:00 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 348 ls Jul 7 15:24:56 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 349 ./helm get values promtail -n loki Jul 7 15:31:27 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 350 ls Jul 7 15:32:23 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1679 exit Jul 7 15:32:26 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1680 cd .. Jul 7 15:32:27 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1681 cd ubuntu/ Jul 7 15:32:28 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1682 l Jul 7 15:32:33 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1683 cat .bashrc Jul 7 15:32:44 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1684 source .bashrc Jul 7 15:32:50 bastion LinuxCommandsWazuh: User ubuntu [3566522]: 1685 clickhouse Jul 7 15:32:53 bastion LinuxCommandsWazuh: User abhijeet [3557147]: 351 sudo su ubuntu Jul 7 15:33:19 bastion abhijeet: root@ [3567457]: exit [0] Jul 7 15:33:25 bastion LinuxCommandsWazuh: User ubuntu [3567563]: 1686 exit Jul 7 15:33:26 bastion LinuxCommandsWazuh: User ubuntu [3567563]: 1687 ls Jul 7 15:33:32 bastion LinuxCommandsWazuh: User ubuntu [3567563]: 1688 cat .bashrc Jul 7 15:35:23 bastion LinuxCommandsWazuh: User ashish [3569492]: 115 mongo Jul 7 15:35:58 bastion LinuxCommandsWazuh: User ashish [3570813]: 115 mongo Jul 7 15:49:07 bastion LinuxCommandsWazuh: User ankur [3583772]: 831 exit Jul 7 15:49:44 bastion LinuxCommandsWazuh: User ashish [3584341]: 115 mongo Jul 7 15:50:26 bastion LinuxCommandsWazuh: User ubuntu [3460666]: 1668 ssh ubuntu@34.131.223.232 Jul 7 15:50:32 bastion abhijeet: root@ [3567457]: su ubuntu [0] Jul 7 15:52:21 bastion LinuxCommandsWazuh: User ankur [3584470]: 831 exit Jul 7 15:56:58 bastion LinuxCommandsWazuh: User ashish [3584341]: 116 redis Jul 7 16:08:43 bastion LinuxCommandsWazuh: User ashish [3601004]: 115 mongo Jul 7 16:54:12 bastion LinuxCommandsWazuh: User shamailtayyab [3646032]: 1998 internal Jul 7 16:54:54 bastion LinuxCommandsWazuh: User shamailtayyab [3646032]: 1998 internal Jul 7 16:55:06 bastion LinuxCommandsWazuh: User shamailtayyab [3646032]: 1999 gils Jul 7 16:55:06 bastion LinuxCommandsWazuh: User shamailtayyab [3646032]: 2000 ls Jul 7 16:55:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3646032]: 2000 ls] Jul 7 16:55:10 bastion LinuxCommandsWazuh: User shamailtayyab [3646032]: 2001 inte Jul 7 17:10:28 bastion LinuxCommandsWazuh: User ashish [3662820]: 116 redis Jul 7 17:47:59 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 352 sudo su Jul 7 17:48:23 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 353 kubectl get configmap -n nitrox-production Jul 7 17:51:12 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 354 kubectl edit configmap urlbird-config -n nitrox-production Jul 7 17:53:42 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 355 #kubectl rollout restart -n nitrox-production Jul 7 17:53:59 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 356 kubectl get pods -n nitrox-production Jul 7 17:54:11 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 357 kubectl get deployment -n nitrox-production Jul 7 17:55:01 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 358 kubectl rollout restart deploy urlbird urlbird-jobs -n nitrox-production Jul 7 17:55:10 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 359 kubectl get deployment -n nitrox-production Jul 7 17:55:22 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3690276]: 359 kubectl get deployment -n nitrox-production] Jul 7 17:55:53 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 359 kubectl get deployment -n nitrox-production Jul 7 17:56:01 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 360 kubectl get pods -n nitrox-production Jul 7 17:56:10 bastion LinuxCommandsWazuh: User abhijeet [3690276]: 360 kubectl get pods -n nitrox-production Jul 7 17:56:25 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3690276]: 360 kubectl get pods -n nitrox-production] Jul 7 17:57:40 bastion LinuxCommandsWazuh: User ankur [3691462]: 832 byobu Jul 7 17:58:00 bastion LinuxCommandsWazuh: User ankur [1556768]: 828 clickhouse-ssh Jul 7 17:58:08 bastion LinuxCommandsWazuh: User ankur [1556768]: 829 k get configmaps Jul 7 17:58:46 bastion LinuxCommandsWazuh: User ankur [1556768]: 830 k edit configmaps urlbird-config Jul 7 18:00:45 bastion LinuxCommandsWazuh: User ashish [3694931]: 117 mongo Jul 7 18:00:47 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3694931]: 117 mongo] Jul 7 18:08:11 bastion LinuxCommandsWazuh: User rihan [3702619]: 1098 sudo su ubuntu Jul 7 18:08:14 bastion LinuxCommandsWazuh: User rihan [3702619]: 1098 sudo su ubuntu Jul 7 18:29:26 bastion LinuxCommandsWazuh: User ashish [3723846]: 117 mongo Jul 7 18:34:14 bastion LinuxCommandsWazuh: User venky [3728335]: 1320 internal Jul 7 18:34:25 bastion LinuxCommandsWazuh: User venky [3728335]: 1321 kubetail forev Jul 7 18:34:30 bastion LinuxCommandsWazuh: User venky [3728335]: 1322 kubectl get po Jul 7 18:34:37 bastion LinuxCommandsWazuh: User venky [3728335]: 1323 kubectl get po | grep fore Jul 7 18:35:43 bastion LinuxCommandsWazuh: User venky [3728335]: 1324 kubetail forever-7b546c9bf8-72q2p Jul 7 18:35:45 bastion LinuxCommandsWazuh: User venky [3728335]: 1325 kubectl get po | grep fore Jul 7 18:35:49 bastion LinuxCommandsWazuh: User venky [3728335]: 1325 kubectl get po | grep fore Jul 7 18:36:23 bastion LinuxCommandsWazuh: User venky [3728335]: 1326 kubetail forever-7b546c9bf8-72q2p Jul 7 18:36:23 bastion LinuxCommandsWazuh: User venky [3728335]: 1326 kubetail forever-7b546c9bf8-72q2p Jul 7 18:36:25 bastion LinuxCommandsWazuh: User venky [3728335]: 1327 kubectl get po | grep fore Jul 7 18:36:31 bastion LinuxCommandsWazuh: User venky [3728335]: 1328 kubetail forever-7b546c9bf8-72q2p Jul 7 18:36:32 bastion LinuxCommandsWazuh: User venky [3728335]: 1328 kubetail forever-7b546c9bf8-72q2p Jul 7 18:36:55 bastion LinuxCommandsWazuh: User venky [3728335]: 1329 kubetail forever-7b546c9bf8 Jul 7 18:49:53 bastion LinuxCommandsWazuh: User venky [3728335]: 1329 kubetail forever-7b546c9bf8 Jul 7 18:50:02 bastion LinuxCommandsWazuh: User venky [3728335]: 1329 kubetail forever-7b546c9bf8 Jul 7 18:50:05 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3728335]: 1329 kubetail forever-7b546c9bf8] Jul 7 18:53:52 bastion LinuxCommandsWazuh: User rihan [3750405]: 1098 sudo su ubuntu Jul 7 18:58:34 bastion LinuxCommandsWazuh: User ashish [3755598]: 118 redis Jul 7 19:08:36 bastion LinuxCommandsWazuh: User ashish [3765677]: 118 redis Jul 7 19:29:04 bastion LinuxCommandsWazuh: User ashish [3773807]: 119 mongo Jul 7 20:15:36 bastion LinuxCommandsWazuh: User ashish [3777196]: 119 mongo Jul 7 22:41:13 bastion LinuxCommandsWazuh: User ayush [3788901]: 206 exit Jul 7 22:41:39 bastion LinuxCommandsWazuh: User ayush [3788901]: 207 cool-server Jul 7 22:42:00 bastion LinuxCommandsWazuh: User ayush [3788901]: 208 cool-server Jul 7 22:42:05 bastion LinuxCommandsWazuh: User ayush [3788901]: 209 super su Jul 7 22:42:19 bastion ayush: root@ [3788949]: su ubuntu [0] Jul 7 22:42:25 bastion ayush: root@ [3788949]: cool-server [127] Jul 7 22:42:31 bastion ayush: root@ [3788949]: cool-server [130] Jul 7 22:42:32 bastion ayush: message repeated 2 times: [ root@ [3788949]: cool-server [130]] Jul 7 22:42:33 bastion LinuxCommandsWazuh: User ayush [3788901]: 210 sudo su Jul 7 22:43:17 bastion LinuxCommandsWazuh: User ayush [3788901]: 211 cool-server