Jul 8 09:47:12 bastion LinuxCommandsWazuh: User ankur [3843865]: 836 exit Jul 8 09:48:02 bastion LinuxCommandsWazuh: User ankur [3843865]: 837 byobu Jul 8 09:48:08 bastion LinuxCommandsWazuh: User ankur [3843865]: 837 byobu Jul 8 11:57:13 bastion LinuxCommandsWazuh: User venky [3854944]: 1329 kubetail forever-7b546c9bf8 Jul 8 11:57:20 bastion LinuxCommandsWazuh: User venky [3854944]: 1330 kubectl get po Jul 8 11:57:29 bastion LinuxCommandsWazuh: User venky [3854944]: 1331 kubectl get po | grep link Jul 8 11:57:34 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [3854944]: 1331 kubectl get po | grep link] Jul 8 11:58:17 bastion LinuxCommandsWazuh: User venky [3854944]: 1332 kubectl get ing Jul 8 11:58:48 bastion LinuxCommandsWazuh: User venky [3854944]: 1333 kubectl edit ing Jul 8 11:58:56 bastion LinuxCommandsWazuh: User venky [3854944]: 1334 kubectl get po | grep forever Jul 8 12:01:30 bastion LinuxCommandsWazuh: User venky [3854944]: 1335 kubetail forever Jul 8 12:01:31 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3854944]: 1335 kubetail forever ] Jul 8 12:01:40 bastion LinuxCommandsWazuh: User venky [3855883]: 1335 kubetail forever Jul 8 12:02:11 bastion LinuxCommandsWazuh: User ashish [3855970]: 122 redis Jul 8 12:02:15 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ashish [3855970]: 122 redis] Jul 8 12:05:22 bastion LinuxCommandsWazuh: User mohtashim [3856145]: 1131 mongo pixel_v1 Jul 8 12:05:25 bastion LinuxCommandsWazuh: User mohtashim [3856145]: 1132 clear Jul 8 12:05:36 bastion LinuxCommandsWazuh: message repeated 8 times: [ User mohtashim [3856145]: 1132 clear] Jul 8 12:05:56 bastion LinuxCommandsWazuh: User mohtashim [3856145]: 1132 clear Jul 8 12:06:09 bastion LinuxCommandsWazuh: User mohtashim [3856993]: 1132 clear Jul 8 12:07:44 bastion LinuxCommandsWazuh: User mohtashim [3857106]: 1132 clear Jul 8 12:07:46 bastion LinuxCommandsWazuh: User mohtashim [3857106]: 1132 clear Jul 8 12:09:29 bastion LinuxCommandsWazuh: User mohtashim [3857106]: 1133 mongo pixel_v1; Jul 8 12:09:45 bastion LinuxCommandsWazuh: User rihan [3857251]: 1100 mongo Jul 8 12:14:36 bastion LinuxCommandsWazuh: User ashish [3857410]: 122 redis Jul 8 12:19:40 bastion LinuxCommandsWazuh: User venky [3855883]: 1335 kubetail forever Jul 8 12:19:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3855883]: 1335 kubetail forever ] Jul 8 12:19:42 bastion LinuxCommandsWazuh: User venky [3855883]: 1336 kubectl get po | grep forever Jul 8 12:20:00 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [3855883]: 1336 kubectl get po | grep forever] Jul 8 12:20:02 bastion LinuxCommandsWazuh: User venky [3855883]: 1336 kubectl get po | grep forever Jul 8 12:20:10 bastion LinuxCommandsWazuh: User venky [3855883]: 1336 kubectl get po | grep forever Jul 8 12:20:22 bastion LinuxCommandsWazuh: User venky [3855883]: 1337 kubectl scale --replicas=1 deployment/forever -n nitrox-production Jul 8 12:20:24 bastion LinuxCommandsWazuh: User venky [3855883]: 1338 kubectl get po | grep forever Jul 8 12:20:31 bastion LinuxCommandsWazuh: User venky [3855883]: 1339 kubectl scale --replicas=2 deployment/forever -n nitrox-production Jul 8 12:20:33 bastion LinuxCommandsWazuh: User venky [3855883]: 1340 kubectl get po | grep forever Jul 8 12:20:42 bastion LinuxCommandsWazuh: User venky [3855883]: 1340 kubectl get po | grep forever Jul 8 12:20:51 bastion LinuxCommandsWazuh: message repeated 9 times: [ User venky [3855883]: 1340 kubectl get po | grep forever] Jul 8 12:20:55 bastion LinuxCommandsWazuh: User venky [3855883]: 1340 kubectl get po | grep forever Jul 8 12:23:06 bastion LinuxCommandsWazuh: User ashish [3857410]: 122 redis Jul 8 12:23:09 bastion LinuxCommandsWazuh: User ashish [3857410]: 123 get Jul 8 12:23:38 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ashish [3857410]: 123 get ] Jul 8 12:51:36 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1134 mongo pixel_v1; Jul 8 12:51:37 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1135 clear Jul 8 12:55:59 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1136 mongo pixel_v1; Jul 8 12:55:59 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1136 mongo pixel_v1; Jul 8 12:56:00 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1137 clear Jul 8 12:58:59 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1138 mongo pixel_v1; Jul 8 12:59:00 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1139 clear Jul 8 13:01:25 bastion LinuxCommandsWazuh: User mohtashim [3865771]: 1140 mongo pixel_v1; Jul 8 13:11:12 bastion LinuxCommandsWazuh: User ankur [3868238]: 838 exit Jul 8 13:20:03 bastion LinuxCommandsWazuh: User ankur [2152106]: 1450 psql -U postgres Jul 8 13:20:17 bastion LinuxCommandsWazuh: User rihan [3857251]: 1100 mongo Jul 8 13:21:32 bastion LinuxCommandsWazuh: User mohtashim [3878819]: 1134 mongo pixel_v1; Jul 8 13:24:02 bastion LinuxCommandsWazuh: User mohtashim [3878819]: 1135 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jul 8 13:32:03 bastion LinuxCommandsWazuh: User rihan [3889298]: 1100 mongo Jul 8 13:34:39 bastion LinuxCommandsWazuh: User mohtashim [3891817]: 1136 exit Jul 8 13:37:52 bastion LinuxCommandsWazuh: User mohtashim [3891817]: 1137 mongo pixel_v1; Jul 8 13:41:40 bastion LinuxCommandsWazuh: User ashish [3899196]: 125 mongo Jul 8 13:54:32 bastion LinuxCommandsWazuh: User ashish [3911946]: 125 mongo Jul 8 14:11:24 bastion LinuxCommandsWazuh: User mohtashim [3913842]: 1144 mongo pixel_v1; Jul 8 14:11:25 bastion LinuxCommandsWazuh: User mohtashim [3913842]: 1145 clear Jul 8 14:12:07 bastion LinuxCommandsWazuh: User mohtashim [3913842]: 1146 mongo pixel_v1; Jul 8 14:20:14 bastion LinuxCommandsWazuh: User ankur [3914845]: 839 byobu Jul 8 14:35:14 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 360 kubectl get pods -n nitrox-production Jul 8 14:35:16 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 361 ls Jul 8 14:35:33 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 362 kubectl get all -n loki Jul 8 14:35:50 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 363 kubectl get pod -n loki Jul 8 14:36:25 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 364 kubectl exec -it pod grafana-769c7b685f-95phs -n loki -- bash Jul 8 14:36:29 bastion LinuxCommandsWazuh: User abhijeet [3929823]: 365 kubectl exec -it pods grafana-769c7b685f-95phs -n loki -- bash Jul 8 14:45:56 bastion LinuxCommandsWazuh: User mohtashim [3941458]: 1147 exit Jul 8 14:45:57 bastion LinuxCommandsWazuh: User mohtashim [3941458]: 1148 clear Jul 8 14:48:25 bastion LinuxCommandsWazuh: User mohtashim [3941458]: 1149 mongo pixel_v1 Jul 8 14:50:54 bastion LinuxCommandsWazuh: User rihan [3946176]: 1101 psql -d datapulse_v1 -U postgres Jul 8 14:51:30 bastion LinuxCommandsWazuh: User rihan [3946176]: 1102 mongo Jul 8 14:58:47 bastion LinuxCommandsWazuh: User mohtashim [3954249]: 1150 exit Jul 8 15:00:28 bastion LinuxCommandsWazuh: User mohtashim [3954249]: 1151 mongo pixel_v1 Jul 8 15:41:38 bastion LinuxCommandsWazuh: User rihan [3992960]: 1102 mongo Jul 8 15:59:09 bastion LinuxCommandsWazuh: User ashish [3995329]: 126 redis Jul 8 16:00:30 bastion LinuxCommandsWazuh: User ashish [3995329]: 127 mongo Jul 8 16:03:36 bastion LinuxCommandsWazuh: User abhijeet [3995525]: 366 kubectl exec -it pod/grafana-769c7b685f-95phs -n loki -- bash Jul 8 16:06:35 bastion LinuxCommandsWazuh: User abhijeet [3995525]: 366 kubectl exec -it pod/grafana-769c7b685f-95phs -n loki -- bash Jul 8 16:28:19 bastion LinuxCommandsWazuh: User ankur [3998021]: 839 byobu Jul 8 16:28:20 bastion LinuxCommandsWazuh: User ankur [3998021]: 840 ls Jul 8 16:28:31 bastion LinuxCommandsWazuh: User ankur [3998192]: 839 byobu Jul 8 16:28:37 bastion LinuxCommandsWazuh: User ankur [3998192]: 840 k get pods Jul 8 16:29:28 bastion LinuxCommandsWazuh: User ankur [3998192]: 841 k get pods | grep exit Jul 8 16:29:29 bastion LinuxCommandsWazuh: User ankur [3998192]: 841 k get pods | grep exit Jul 8 17:23:43 bastion LinuxCommandsWazuh: User abhijeet [4016531]: 367 exit Jul 8 17:23:47 bastion LinuxCommandsWazuh: User abhijeet [4016531]: 368 ls Jul 8 17:24:06 bastion LinuxCommandsWazuh: User abhijeet [4016531]: 369 mongo Jul 8 17:24:17 bastion LinuxCommandsWazuh: User abhijeet [4016531]: 370 monogosh mongodb://10.190.0.29:27017/pixel_v1 Jul 8 17:24:32 bastion LinuxCommandsWazuh: User abhijeet [4016531]: 371 mongosh mongodb://10.190.0.29:27017/pixel_v1 Jul 8 18:02:03 bastion LinuxCommandsWazuh: User mohtashim [4020412]: 1152 exit Jul 8 18:02:05 bastion LinuxCommandsWazuh: User mohtashim [4020412]: 1153 clear Jul 8 18:02:10 bastion LinuxCommandsWazuh: User mohtashim [4020412]: 1154 kubectl get pods Jul 8 18:02:15 bastion LinuxCommandsWazuh: User mohtashim [4020412]: 1155 kubectl rollout restart deployment/cookie-cutter-common-task Jul 8 18:02:24 bastion LinuxCommandsWazuh: User mohtashim [4020412]: 1156 kubectl get pods Jul 8 18:02:50 bastion LinuxCommandsWazuh: User mohtashim [4020582]: 1157 exit Jul 8 18:04:12 bastion LinuxCommandsWazuh: User mohtashim [4020582]: 1158 mongo pixel_v1 Jul 8 18:18:26 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1157 exit Jul 8 18:18:30 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1158 kubectl get pods Jul 8 18:21:23 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1158 kubectl get pods Jul 8 18:21:32 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1159 kubectl logs -f cookie-cutter-common-task-77f9fc8749-c87vx Jul 8 18:21:43 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1160 kubectl logs -f cookie-cutter-common-task-77f9fc8749-lvjqf Jul 8 18:21:50 bastion LinuxCommandsWazuh: User abhijeet [4022435]: 372 exit Jul 8 18:22:08 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1161 kubectl logs -f cookie-cutter-common-task-77f9fc8749-wzh52 Jul 8 18:22:08 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1161 kubectl logs -f cookie-cutter-common-task-77f9fc8749-wzh52 Jul 8 18:24:19 bastion LinuxCommandsWazuh: User abhijeet [4022435]: 373 internal-server Jul 8 18:38:12 bastion LinuxCommandsWazuh: User abhijeet [4024085]: 374 exit Jul 8 18:46:23 bastion LinuxCommandsWazuh: User mohtashim [4022223]: 1162 kubectl logs -f cookie-cutter-common-task-77f9fc8749-wzh52 | grep "4782e90b-8862-4997-86aa-3c6354e15708" Jul 8 18:55:58 bastion LinuxCommandsWazuh: User abhijeet [4024085]: 375 kubectl exec -it pod/grafana-769c7b685f-95phs -n loki -- bash Jul 8 19:03:16 bastion LinuxCommandsWazuh: User rihan [4025956]: 1102 mongo Jul 8 19:03:24 bastion LinuxCommandsWazuh: User rihan [4025956]: 1103 clickhouse-ssh Jul 8 19:03:30 bastion LinuxCommandsWazuh: User ubuntu [4025976]: 1689 cat .bashrc Jul 8 19:21:48 bastion LinuxCommandsWazuh: User ankur [4027595]: 844 byobu Jul 8 19:41:17 bastion LinuxCommandsWazuh: User ubuntu [4025976]: 1690 clickhouse Jul 8 19:41:20 bastion LinuxCommandsWazuh: User ubuntu [4025976]: 1691 mongo Jul 8 19:42:39 bastion LinuxCommandsWazuh: User rihan [4025956]: 1104 sudo su ubuntu Jul 8 20:13:38 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 376 exit Jul 8 20:15:17 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 377 internal-server Jul 8 20:15:36 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 378 cool-server Jul 8 20:15:43 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 379 nslookup cool-server Jul 8 20:15:48 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 380 cat .bashrc Jul 8 20:16:01 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 381 curl -v telnet://34.131.103.89:22 Jul 8 20:16:17 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 382 ssh -p 12222 devops@34.131.103.89:22 Jul 8 20:17:21 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 383 ssh -p 12222 devops@34.131.103.89 Jul 8 20:18:15 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 384 tcptraceroute 34.131.103.89 22 Jul 8 20:18:22 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 385 tcptraceroute 34.131.103.89 -p 22 Jul 8 20:18:28 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 386 tcptraceroute 34.131.103.89 Jul 8 20:18:42 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 387 sudo tcptraceroute 34.131.103.89 Jul 8 20:22:25 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 388 ifconfig Jul 8 20:22:47 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 389 cat .bashrc Jul 8 20:23:07 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 390 cd .. Jul 8 20:23:07 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 391 l Jul 8 20:23:10 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 392 cd dev Jul 8 20:23:10 bastion LinuxCommandsWazuh: User abhijeet [4079246]: 393 ls Jul 8 20:23:45 bastion LinuxCommandsWazuh: User abhijeet [4085560]: 394 exit Jul 8 20:26:12 bastion LinuxCommandsWazuh: User abhijeet [4085560]: 395 nslookup Nitro Jul 8 20:29:23 bastion LinuxCommandsWazuh: User abhijeet [4085560]: 396 cat .bashrc