Jul 17 08:24:07 bastion LinuxCommandsWazuh: User ankur [1390959]: 14 exit Jul 17 08:24:22 bastion LinuxCommandsWazuh: User ankur [1390959]: 15 byobu Jul 17 12:06:35 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 709 internal-server Jul 17 12:06:48 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 710 ls Jul 17 12:06:51 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 711 cd K8s-tools/ Jul 17 12:08:01 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 712 ./kubeScrib.sh Jul 17 12:11:33 bastion LinuxCommandsWazuh: User mohtashim [1410787]: 1314 exit Jul 17 12:11:35 bastion LinuxCommandsWazuh: User mohtashim [1410787]: 1315 clear Jul 17 12:11:43 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1410787]: 1315 clear] Jul 17 12:12:01 bastion LinuxCommandsWazuh: User mohtashim [1410787]: 1316 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jul 17 12:12:27 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 713 internal-server Jul 17 12:12:28 bastion LinuxCommandsWazuh: User abhijeet [1410499]: 714 ls Jul 17 12:17:01 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 715 exit Jul 17 12:17:04 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 716 ls Jul 17 12:17:13 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 717 '#012hi ther e' Jul 17 12:17:23 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 718 ls Jul 17 12:17:27 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 719 cd K8s-tools/ Jul 17 12:19:58 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 720 ./kubeScrib.sh Jul 17 12:19:59 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 721 ls Jul 17 12:20:33 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 722 kubectl exec -it loki-ingester-0 -n loki -- bash Jul 17 12:23:12 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 723 kubectl exec -it loki-ingester-0 -n loki -- sh Jul 17 12:33:21 bastion LinuxCommandsWazuh: User abhijeet [1411762]: 724 kubectl exec -it loki-querier-0 -n loki -- sh Jul 17 12:59:58 bastion LinuxCommandsWazuh: User abhijeet [1415842]: 726 exit Jul 17 12:59:59 bastion LinuxCommandsWazuh: User abhijeet [1415842]: 727 ls Jul 17 13:00:02 bastion LinuxCommandsWazuh: User abhijeet [1415842]: 728 cd K8s-tools/ Jul 17 13:00:03 bastion LinuxCommandsWazuh: User abhijeet [1415842]: 729 ;l Jul 17 13:19:12 bastion LinuxCommandsWazuh: User ayush [1417890]: 226 exit Jul 17 13:19:18 bastion LinuxCommandsWazuh: User ayush [1417890]: 227 mongosh Jul 17 13:20:08 bastion LinuxCommandsWazuh: User ayush [1417890]: 228 make mongo Jul 17 13:20:13 bastion LinuxCommandsWazuh: User ayush [1417890]: 229 mongosh Jul 17 13:20:20 bastion LinuxCommandsWazuh: User ayush [1417890]: 230 clear Jul 17 13:20:35 bastion LinuxCommandsWazuh: User ayush [1417890]: 231 cat Makefile Jul 17 13:21:11 bastion LinuxCommandsWazuh: User ayush [1417890]: 232 mongosh Jul 17 13:21:33 bastion LinuxCommandsWazuh: User aman [1418113]: 174 exit Jul 17 13:21:34 bastion LinuxCommandsWazuh: User aman [1418113]: 175 clear Jul 17 13:21:37 bastion LinuxCommandsWazuh: User aman [1418113]: 176 mongosh Jul 17 13:21:47 bastion LinuxCommandsWazuh: User aman [1418113]: 177 make pods Jul 17 13:21:53 bastion LinuxCommandsWazuh: User aman [1418113]: 178 clear Jul 17 13:21:56 bastion LinuxCommandsWazuh: User aman [1418113]: 179 cat Makefile Jul 17 13:22:16 bastion LinuxCommandsWazuh: User aman [1418113]: 180 mongo Jul 17 13:22:23 bastion LinuxCommandsWazuh: User aman [1418113]: 181 mongosh Jul 17 13:22:25 bastion LinuxCommandsWazuh: User aman [1418113]: 182 clear Jul 17 13:23:36 bastion LinuxCommandsWazuh: User aman [1418373]: 183 exit Jul 17 13:23:38 bastion LinuxCommandsWazuh: User aman [1418373]: 184 mongo Jul 17 13:23:42 bastion LinuxCommandsWazuh: User aman [1418373]: 185 clear Jul 17 13:29:37 bastion LinuxCommandsWazuh: User ayush [1417890]: 233 mongo Jul 17 13:36:10 bastion LinuxCommandsWazuh: User ayush [1420059]: 234 exit Jul 17 13:41:24 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 726 exit Jul 17 13:41:26 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 727 cd K8s-tools/ Jul 17 13:41:27 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 728 ;s Jul 17 13:41:52 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 729 ./kubeScrib.sh Jul 17 13:42:08 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 730 kubectl exec -it prometheus-alertmanager-0 -n loki -- bash Jul 17 13:56:53 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 731 kubectl exec -it prometheus-alertmanager-0 -n loki -- sh Jul 17 13:57:15 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 732 ./kubeScrib.sh Jul 17 14:05:33 bastion LinuxCommandsWazuh: User abhijeet [1420244]: 733 kubectl exec -it prometheus-server-7f8669fff-6x9z5 -n loki -- sh Jul 17 14:06:22 bastion LinuxCommandsWazuh: User abhijeet [1423112]: 734 exit Jul 17 14:06:52 bastion LinuxCommandsWazuh: User abhijeet [1423112]: 735 internal-server Jul 17 15:04:23 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 740 ./kubeScrib.sh Jul 17 15:04:54 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 741 internal-server Jul 17 15:04:55 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 742 ;s Jul 17 15:04:57 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 743 ls Jul 17 15:05:25 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 744 vim loki-values.yaml Jul 17 15:05:26 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 745 ls Jul 17 15:05:35 bastion abhijeet: root@ [1427576]: exit [0] Jul 17 15:05:40 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1718 exit Jul 17 15:05:40 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1719 ;s Jul 17 15:05:42 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1720 ls Jul 17 15:05:45 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1721 cd Jul 17 15:05:46 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1722 ls Jul 17 15:05:52 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1723 cd toilet/ Jul 17 15:05:53 bastion LinuxCommandsWazuh: User ubuntu [1427592]: 1724 ls Jul 17 15:05:57 bastion abhijeet: root@ [1427576]: su ubuntu [0] Jul 17 15:05:59 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 746 sudo su Jul 17 15:06:00 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 747 ls Jul 17 15:28:02 bastion LinuxCommandsWazuh: User mohtashim [1429979]: 1317 exit Jul 17 15:28:04 bastion LinuxCommandsWazuh: User mohtashim [1429979]: 1318 clear Jul 17 15:29:16 bastion LinuxCommandsWazuh: User mohtashim [1430101]: 1317 exit Jul 17 15:34:30 bastion LinuxCommandsWazuh: User mohtashim [1429979]: 1319 mongo pixel_v1 Jul 17 15:35:44 bastion LinuxCommandsWazuh: User mohtashim [1430255]: 1320 exit Jul 17 15:35:49 bastion LinuxCommandsWazuh: User mohtashim [1430255]: 1320 exit Jul 17 15:45:12 bastion LinuxCommandsWazuh: User abhijeet [1427517]: 748 internal-server Jul 17 16:04:25 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1322 mongo pixel_v1; Jul 17 16:04:26 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1323 clear Jul 17 16:04:31 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1323 clear Jul 17 16:04:32 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1323 clear Jul 17 16:04:42 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1324 psql -h 10.94.16.3 -U postgres -d nitrox_v1 Jul 17 16:05:13 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1325 psql -h 10.94.16.3 -U postgres -d nitrox_v2 Jul 17 16:05:23 bastion LinuxCommandsWazuh: User mohtashim [1432742]: 1326 kubectl get pods Jul 17 16:09:31 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 749 exit Jul 17 16:09:34 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 750 cd K8s-tools/ Jul 17 16:09:34 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 751 ls Jul 17 16:10:25 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 752 ./kubeScrib.sh Jul 17 16:10:30 bastion LinuxCommandsWazuh: User ashish [1434075]: 149 mongo Jul 17 16:10:59 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 753 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production Jul 17 16:15:16 bastion LinuxCommandsWazuh: User abhijeet [1434304]: 749 exit Jul 17 16:16:50 bastion LinuxCommandsWazuh: User abhijeet [1434304]: 750 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-producation Jul 17 16:16:56 bastion LinuxCommandsWazuh: User abhijeet [1434304]: 751 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production Jul 17 16:18:06 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 754 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production Jul 17 16:18:17 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 755 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production | grep CommandError Jul 17 16:18:22 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 755 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production | grep CommandError Jul 17 16:20:03 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 756 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production Jul 17 16:26:40 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 757 kubectl logs nitrox-dj-69df95d8b6-cjg25 -n nitrox-production | grep mig Jul 17 16:26:56 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 758 ./kubeScrib.sh Jul 17 16:27:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [1433780]: 758 ./kubeScrib.sh ] Jul 17 16:27:44 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 759 kubectl logs nitrox-dj-f5cc598ff-jkflp -n nitrox-production Jul 17 16:27:45 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 760 kubectl logs nitrox-dj-f5cc598ff-jkflp -n nitrox-production Jul 17 16:27:50 bastion LinuxCommandsWazuh: User abhijeet [1433780]: 761 kubectl logs nitrox-dj-f5cc598ff-jkflp -n nitrox-production | grep migr Jul 17 16:56:14 bastion LinuxCommandsWazuh: User ashish [1434075]: 150 psql -h 10.94.16.3 -p 5432 -U postgres Jul 17 17:00:44 bastion LinuxCommandsWazuh: User abhijeet [1438810]: 765 exit Jul 17 17:38:37 bastion LinuxCommandsWazuh: User venky [1442105]: 1450 byobu Jul 17 17:38:39 bastion LinuxCommandsWazuh: User venky [1442105]: 1450 byobu Jul 17 17:38:46 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 17 17:38:48 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 17 17:41:25 bastion LinuxCommandsWazuh: User mohtashim [1444934]: 1326 kubectl get pods Jul 17 17:41:27 bastion LinuxCommandsWazuh: User mohtashim [1444934]: 1327 clear Jul 17 17:42:41 bastion LinuxCommandsWazuh: User mohtashim [1444934]: 1328 mongo pixel_v1; Jul 17 17:54:15 bastion LinuxCommandsWazuh: User abhijeet [1457847]: 765 exit Jul 17 17:54:16 bastion LinuxCommandsWazuh: User abhijeet [1457847]: 766 ls Jul 17 17:54:22 bastion LinuxCommandsWazuh: User ubuntu [1457993]: 1725 exit Jul 17 17:54:24 bastion LinuxCommandsWazuh: User ubuntu [1457993]: 1726 ls Jul 17 17:54:25 bastion LinuxCommandsWazuh: User ubuntu [1457993]: 1727 cd Jul 17 17:54:26 bastion LinuxCommandsWazuh: User ubuntu [1457993]: 1728 l Jul 17 17:54:30 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 17 17:54:32 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 17 17:54:42 bastion LinuxCommandsWazuh: User abhijeet [1457847]: 767 sudo su ubuntu Jul 17 17:55:58 bastion LinuxCommandsWazuh: User abhijeet [1457847]: 768 internal-server Jul 17 17:57:11 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 769 exit Jul 17 17:57:12 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 770 ls Jul 17 17:57:16 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 771 cd K8s-tools/ Jul 17 17:57:17 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 772 ;s Jul 17 17:58:34 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 773 ./kubeScrib.sh Jul 17 17:59:05 bastion LinuxCommandsWazuh: User ankur [1463489]: 16 exit Jul 17 17:59:30 bastion LinuxCommandsWazuh: User ankur [1463489]: 17 byobu Jul 17 18:00:35 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 774 find / -name prometheus Jul 17 18:00:38 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 775 find /home -name prometheus Jul 17 18:01:14 bastion LinuxCommandsWazuh: User ubuntu [1466510]: 1729 exit Jul 17 18:01:33 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 776 kubels Jul 17 18:01:37 bastion LinuxCommandsWazuh: User ubuntu [1466510]: 1729 exit Jul 17 18:01:38 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ubuntu [1466510]: 1729 exit] Jul 17 18:01:45 bastion LinuxCommandsWazuh: User abhijeet [1467114]: 769 exit Jul 17 18:02:24 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 777 LS Jul 17 18:02:26 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 778 ls Jul 17 18:02:34 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 779 ./kubeScrib.sh Jul 17 18:03:48 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 780 curl -v https://t.mekhook.ws Jul 17 18:04:15 bastion LinuxCommandsWazuh: User abhijeet [1461438]: 781 curl -v telnet://64.70.19.203:443 Jul 17 19:20:29 bastion LinuxCommandsWazuh: User ankur [1477283]: 18 exit Jul 17 19:24:41 bastion LinuxCommandsWazuh: User ashish [1481281]: 150 psql -h 10.94.16.3 -p 5432 -U postgres Jul 17 19:29:52 bastion LinuxCommandsWazuh: User abhijeet [1486897]: 782 exit Jul 17 19:29:59 bastion LinuxCommandsWazuh: User abhijeet [1486897]: 783 curl -v http://10.190.15.203:37743 Jul 17 19:42:37 bastion LinuxCommandsWazuh: User rihan [1499499]: 1129 mongo Jul 17 19:42:59 bastion LinuxCommandsWazuh: User rihan [1499499]: 1129 mongo Jul 17 19:43:47 bastion LinuxCommandsWazuh: User rihan [1499499]: 1130 kubectl get pods | grep forever Jul 17 19:44:10 bastion LinuxCommandsWazuh: User rihan [1499499]: 1131 kubectl exec --it forever-7664768ccc-9s55b bash Jul 17 19:49:26 bastion LinuxCommandsWazuh: User rihan [1499499]: 1132 kubectl exec -it forever-7664768ccc-9s55b bash Jul 17 19:50:23 bastion LinuxCommandsWazuh: User rihan [1499499]: 1132 kubectl exec -it forever-7664768ccc-9s55b bash Jul 17 19:57:38 bastion LinuxCommandsWazuh: User ashish [1481281]: 151 mongo Jul 17 22:03:54 bastion LinuxCommandsWazuh: User venky [1552771]: 1450 byobu Jul 17 22:03:59 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 17 22:04:02 bastion LinuxCommandsWazuh: User venky [3480480]: 1499 kubectl get hpa Jul 17 22:04:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3480480]: 1499 kubectl get hpa ] Jul 17 22:09:28 bastion LinuxCommandsWazuh: User venky [3480480]: 1499 kubectl get hpa Jul 17 22:09:37 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [3480480]: 1499 kubectl get hpa ] Jul 17 23:47:04 bastion LinuxCommandsWazuh: User venky [3480480]: 1499 kubectl get hpa Jul 17 23:47:07 bastion LinuxCommandsWazuh: User venky [3480480]: 1500 kubectl get po | grep cooki Jul 17 23:47:14 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3480480]: 1500 kubectl get po | grep cooki] Jul 17 23:47:25 bastion LinuxCommandsWazuh: User venky [3480480]: 1501 stern cookie-cutter Jul 17 23:47:30 bastion LinuxCommandsWazuh: User venky [3480480]: 1502 kubectl get po | grep cooki