Sep 5 12:14:45 bastion LinuxCommandsWazuh: User abhijeet [1293524]: 1998 kubectl exec -it -U root prometheus-alertmanager-0 -n loki -- sh Sep 5 12:35:57 bastion LinuxCommandsWazuh: User abhijeet [1295721]: 1998 exit Sep 5 12:36:08 bastion LinuxCommandsWazuh: User ayush [1295739]: 419 cool-server Sep 5 12:39:56 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 1998 exit Sep 5 12:40:01 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 1999 ls Sep 5 12:40:33 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 2000 kubectl get cm -n nitrox-prodction Sep 5 12:40:40 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 2001 kubectl get cm -n nitrox-production Sep 5 12:41:09 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 2002 kubectl get cm nitrox-dj-config -n nitrox-production -o yaml Sep 5 12:41:35 bastion LinuxCommandsWazuh: User abhijeet [1295906]: 2003 kubectl get cm -n nitrox-production Sep 5 12:43:46 bastion LinuxCommandsWazuh: User ayush [1295739]: 419 cool-server Sep 5 12:43:47 bastion LinuxCommandsWazuh: User abhijeet [1296210]: 1998 sudo su ayush Sep 5 12:45:14 bastion LinuxCommandsWazuh: User abhijeet [1296210]: 1999 ls Sep 5 12:47:05 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 1998 ls Sep 5 12:47:12 bastion LinuxCommandsWazuh: User ayush [1296976]: 419 cool-server Sep 5 12:47:26 bastion LinuxCommandsWazuh: User ayush [1296976]: 419 cool-server Sep 5 12:47:30 bastion LinuxCommandsWazuh: User ayush [1296976]: 420 exirt Sep 5 12:47:32 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 1999 sudo su ayush Sep 5 12:47:33 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2000 ls Sep 5 12:47:36 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2001 kubectl get cm -n nitrox-production Sep 5 12:48:02 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2002 kubectl get cm nitrox-dj-config -n nitrox-production -o yaml Sep 5 12:50:12 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2003 kubectl edit cm nitrox-dj-config -n nitrox-production Sep 5 12:51:24 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2004 kubectl get cm nitrox-dj-config -n nitrox-production -o yaml Sep 5 12:51:46 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2005 kubectl edit cm nitrox-dj-config -n nitrox-production Sep 5 12:52:49 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2005 kubectl edit cm nitrox-dj-config -n nitrox-production Sep 5 12:53:43 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2005 kubectl edit cm nitrox-dj-config -n nitrox-production Sep 5 12:53:45 bastion LinuxCommandsWazuh: User abhijeet [1296962]: 2006 kubectl get cm nitrox-dj-config -n nitrox-production -o yaml Sep 5 13:08:56 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 1998 exit Sep 5 13:09:00 bastion LinuxCommandsWazuh: User ayush [1299026]: 421 exit Sep 5 13:30:43 bastion LinuxCommandsWazuh: User mohtashim [1300885]: 831 exit Sep 5 13:30:47 bastion LinuxCommandsWazuh: User mohtashim [1300885]: 832 k get [pds Sep 5 13:30:52 bastion LinuxCommandsWazuh: User mohtashim [1300885]: 833 ke get pods Sep 5 13:30:58 bastion LinuxCommandsWazuh: User mohtashim [1300885]: 834 k get pods Sep 5 13:31:08 bastion LinuxCommandsWazuh: User mohtashim [1300885]: 835 k get pods | grep "cookie" Sep 5 13:34:22 bastion LinuxCommandsWazuh: User ayush [1299026]: 422 cool-server Sep 5 13:34:23 bastion LinuxCommandsWazuh: User ayush [1299026]: 423 ls Sep 5 13:34:24 bastion LinuxCommandsWazuh: User ayush [1299026]: 424 lsc Sep 5 13:34:26 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 1999 sudo su ayush Sep 5 13:34:30 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2000 cd /home/ Sep 5 13:34:31 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2001 ls Sep 5 13:34:38 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2002 cd ankur Sep 5 13:34:40 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2003 ls Sep 5 13:34:42 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2004 cat .ssh/ Sep 5 13:34:46 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2005 sudo cat .ssh/ Sep 5 13:34:48 bastion abhijeet: root@ [1301140]: exit [0] Sep 5 13:34:49 bastion abhijeet: root@ [1301140]: ls [0] Sep 5 13:34:53 bastion LinuxCommandsWazuh: User ankur [1301161]: 1898 byobu Sep 5 13:34:55 bastion LinuxCommandsWazuh: User ankur [1301161]: 1899 cd Sep 5 13:34:55 bastion LinuxCommandsWazuh: User ankur [1301161]: 1900 ls Sep 5 13:34:57 bastion LinuxCommandsWazuh: User ankur [1301161]: 1901 cat .ssh/ Sep 5 13:35:04 bastion LinuxCommandsWazuh: User ankur [1301161]: 1902 cat .ssh/id_rsa.pub Sep 5 13:36:07 bastion LinuxCommandsWazuh: User ankur [1301161]: 1903 ssh ankur@34.131.96.81 Sep 5 13:36:26 bastion LinuxCommandsWazuh: User ankur [1301161]: 1904 ssh ubuntu@@34.131.96.81 Sep 5 13:36:57 bastion LinuxCommandsWazuh: User ankur [1301161]: 1904 ssh ubuntu@@34.131.96.81 Sep 5 13:36:58 bastion LinuxCommandsWazuh: User ankur [1301161]: 1904 ssh ubuntu@@34.131.96.81 Sep 5 13:37:17 bastion LinuxCommandsWazuh: User ankur [1301161]: 1905 ls Sep 5 13:37:20 bastion LinuxCommandsWazuh: User ankur [1301161]: 1906 cd .ssh/ Sep 5 13:37:21 bastion LinuxCommandsWazuh: User ankur [1301161]: 1907 ls Sep 5 13:39:39 bastion LinuxCommandsWazuh: User ankur [1301161]: 1908 ssh ubuntu@@34.131.96.81 -vvv Sep 5 13:41:29 bastion LinuxCommandsWazuh: User ankur [1301161]: 1909 ssh ubuntu@34.141.96.81 Sep 5 13:41:38 bastion LinuxCommandsWazuh: User ankur [1301161]: 1910 ssh ubuntu@34.131.96.81 Sep 5 13:41:41 bastion LinuxCommandsWazuh: User ankur [1301161]: 1911 cd .. Sep 5 13:41:49 bastion LinuxCommandsWazuh: User ankur [1301161]: 1912 cd Sep 5 13:41:55 bastion LinuxCommandsWazuh: User ankur [1301161]: 1913 vim .bashrc Sep 5 13:42:11 bastion LinuxCommandsWazuh: User ankur [1301161]: 1913 vim .bashrc Sep 5 13:42:27 bastion LinuxCommandsWazuh: User ankur [1301161]: 1914 redis-cli Sep 5 13:42:47 bastion LinuxCommandsWazuh: User ankur [1301161]: 1915 ls Sep 5 13:43:07 bastion LinuxCommandsWazuh: User ankur [1301161]: 1916 vim .bashrc Sep 5 13:53:58 bastion LinuxCommandsWazuh: User ankur [1303029]: 1898 byobu Sep 5 14:14:18 bastion LinuxCommandsWazuh: User abhijeet [1323547]: 1998 exit Sep 5 14:14:29 bastion LinuxCommandsWazuh: User abhijeet [1323547]: 1999 cd to Sep 5 14:14:29 bastion LinuxCommandsWazuh: User abhijeet [1323547]: 2000 ls Sep 5 14:14:31 bastion LinuxCommandsWazuh: User abhijeet [1323547]: 2000 ls Sep 5 14:38:21 bastion abhijeet: root@ [1301140]: su ankur [0] Sep 5 14:38:22 bastion LinuxCommandsWazuh: User abhijeet [1299012]: 2006 sudo su Sep 5 15:09:54 bastion LinuxCommandsWazuh: User ankur [1379384]: 1917 exit Sep 5 15:10:02 bastion LinuxCommandsWazuh: User ankur [1379384]: 1918 cat .bashrc Sep 5 15:10:37 bastion LinuxCommandsWazuh: User ankur [1380161]: 1917 exit Sep 5 15:10:39 bastion LinuxCommandsWazuh: User ankur [1380161]: 1918 ls Sep 5 15:10:48 bastion LinuxCommandsWazuh: User ankur [1380161]: 1919 k get configmap Sep 5 15:10:51 bastion LinuxCommandsWazuh: User ankur [1380161]: 1920 k get configmaps Sep 5 15:11:30 bastion LinuxCommandsWazuh: User ankur [1380161]: 1921 k edit configmap urlbird-config Sep 5 15:11:48 bastion LinuxCommandsWazuh: User ankur [1380161]: 1921 k edit configmap urlbird-config Sep 5 15:12:24 bastion LinuxCommandsWazuh: User ankur [1380161]: 1922 k edit configmap nitrox-ck-config Sep 5 15:34:59 bastion LinuxCommandsWazuh: User abhijeet [1404487]: 1998 exit Sep 5 15:35:07 bastion LinuxCommandsWazuh: User abhijeet [1404487]: 1999 kubectl get pods -b loki Sep 5 15:35:11 bastion LinuxCommandsWazuh: User abhijeet [1404487]: 2000 kubectl get pods -n loki Sep 5 16:10:17 bastion LinuxCommandsWazuh: User abhijeet [1440157]: 1998 kubectl get pods -n loki Sep 5 16:10:21 bastion LinuxCommandsWazuh: User ayush [1440235]: 425 exit Sep 5 16:10:22 bastion LinuxCommandsWazuh: User ayush [1440235]: 426 ls Sep 5 16:14:50 bastion LinuxCommandsWazuh: User ayush [1440235]: 426 ls Sep 5 16:14:52 bastion LinuxCommandsWazuh: User ayush [1440235]: 427 kls Sep 5 16:14:53 bastion LinuxCommandsWazuh: User ayush [1440235]: 427 kls Sep 5 16:14:54 bastion LinuxCommandsWazuh: User ayush [1440235]: 428 ls Sep 5 16:15:02 bastion LinuxCommandsWazuh: User ayush [1440235]: 429 ssh ubuntu@vpn Sep 5 16:15:05 bastion LinuxCommandsWazuh: User abhijeet [1440157]: 1999 sudo su ayush Sep 5 16:28:08 bastion LinuxCommandsWazuh: User ashish [1458327]: 429 mongo Sep 5 16:28:13 bastion LinuxCommandsWazuh: User ashish [1458327]: 430 byobu'#012; Sep 5 16:28:17 bastion LinuxCommandsWazuh: User ashish [1458526]: 429 mongo Sep 5 16:28:44 bastion LinuxCommandsWazuh: User ashish [1458526]: 430 psql -h 10.94.16.3 -p 5432 -U dbuser -d treasure_v1; Sep 5 16:30:06 bastion LinuxCommandsWazuh: User ashish [1458526]: 431 psql -h 10.94.16.3 -p 5432 -U postgres -d treasure_v1; Sep 5 16:30:07 bastion LinuxCommandsWazuh: User ashish [1458327]: 431 byobu Sep 5 16:44:16 bastion LinuxCommandsWazuh: User aman [1476190]: 201 exit Sep 5 16:44:19 bastion LinuxCommandsWazuh: User aman [1476305]: 201 exit Sep 5 16:44:31 bastion LinuxCommandsWazuh: User aman [1476305]: 202 psql -U postgres nitrox_v2 Sep 5 16:45:33 bastion LinuxCommandsWazuh: User abhijeet [1478832]: 1998 exit Sep 5 16:45:34 bastion LinuxCommandsWazuh: User abhijeet [1478832]: 1999 ls Sep 5 16:45:47 bastion LinuxCommandsWazuh: User abhijeet [1478832]: 1999 ls Sep 5 16:45:50 bastion LinuxCommandsWazuh: User abhijeet [1478832]: 1999 ls Sep 5 16:46:06 bastion LinuxCommandsWazuh: User abhijeet [1478832]: 1999 ls Sep 5 16:46:12 bastion LinuxCommandsWazuh: User ayush [1480715]: 430 exit Sep 5 16:46:13 bastion LinuxCommandsWazuh: User ayush [1480715]: 431 lsc Sep 5 16:46:52 bastion LinuxCommandsWazuh: User aman [1476305]: 203 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Sep 5 16:46:55 bastion LinuxCommandsWazuh: User aman [1476305]: 204 clear Sep 5 16:46:57 bastion LinuxCommandsWazuh: User aman [1476305]: 205 mongo Sep 5 16:47:00 bastion LinuxCommandsWazuh: User aman [1476305]: 205 mongo Sep 5 16:47:01 bastion LinuxCommandsWazuh: User aman [1476305]: 206 clear Sep 5 16:47:01 bastion LinuxCommandsWazuh: User aman [1476190]: 202 byobu Sep 5 16:47:02 bastion LinuxCommandsWazuh: User aman [1476190]: 203 clear Sep 5 17:28:04 bastion LinuxCommandsWazuh: User ayush [1480715]: 432 cool-server Sep 5 17:37:46 bastion LinuxCommandsWazuh: User ankur [1533087]: 1917 exit Sep 5 17:38:01 bastion LinuxCommandsWazuh: User ankur [176760]: 1902 k get hpa