Sep 9 11:47:53 bastion LinuxCommandsWazuh: User ankur [2585174]: 1958 byobu Sep 9 11:47:55 bastion LinuxCommandsWazuh: User ankur [2182299]: 1985 kubectl exec -it forever-585f8d576-blljf -- sh -c '#012for pid in $(ls /proc | grep "^[0-9]"); do#012 cmd=$(tr -d "\0" < /proc/$pid/cmdline 2>/dev/null)#012 if echo "$cmd" | grep -q "gunicorn"; then#012 echo "$pid: $cmd"#012 fi#012done' Sep 9 11:50:56 bastion LinuxCommandsWazuh: User ankur [2182299]: 1986 k get pods | grep fore Sep 9 11:51:05 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [2182299]: 1986 k get pods | grep fore] Sep 9 11:51:06 bastion LinuxCommandsWazuh: User ankur [2182299]: 1986 k get pods | grep fore Sep 9 11:51:07 bastion LinuxCommandsWazuh: User ankur [2182299]: 1986 k get pods | grep fore Sep 9 11:51:15 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2182299]: 1986 k get pods | grep fore] Sep 9 11:59:45 bastion LinuxCommandsWazuh: User ankur [2585174]: 1958 byobu Sep 9 11:59:47 bastion LinuxCommandsWazuh: User ankur [2585174]: 1959 exity Sep 9 12:32:43 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 1998 sudo su ayush Sep 9 12:32:47 bastion LinuxCommandsWazuh: User ayush [2600465]: 434 cool-server Sep 9 12:33:02 bastion LinuxCommandsWazuh: User ayush [2600465]: 434 cool-server Sep 9 12:33:05 bastion LinuxCommandsWazuh: User ayush [2600465]: 435 cd Sep 9 12:33:06 bastion LinuxCommandsWazuh: User ayush [2600465]: 436 ls Sep 9 12:33:13 bastion LinuxCommandsWazuh: User ayush [2600465]: 437 nslookup co Sep 9 12:33:27 bastion LinuxCommandsWazuh: User ayush [2600465]: 438 cd Sep 9 12:33:31 bastion LinuxCommandsWazuh: User ayush [2600465]: 439 cat .bashrc Sep 9 12:33:49 bastion LinuxCommandsWazuh: User ayush [2600465]: 440 curl http://34.131.103.89:22 Sep 9 12:34:00 bastion LinuxCommandsWazuh: User ayush [2600465]: 441 curl http://34.131.103.89:12222 Sep 9 12:34:08 bastion LinuxCommandsWazuh: User ayush [2600465]: 442 curl http://34.131.103.89:12222 -v Sep 9 12:34:14 bastion LinuxCommandsWazuh: User ayush [2600465]: 443 cool-server Sep 9 12:34:23 bastion LinuxCommandsWazuh: User ayush [2600465]: 444 curl http://34.131.103.89:12222 -vv Sep 9 12:38:05 bastion LinuxCommandsWazuh: User ayush [2600465]: 445 cool-server Sep 9 12:47:43 bastion LinuxCommandsWazuh: User ayush [2600465]: 446 ls Sep 9 12:47:45 bastion LinuxCommandsWazuh: User ayush [2600465]: 447 cd Sep 9 12:47:46 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 1998 sudo su ayush Sep 9 12:47:48 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 1999 cd Sep 9 12:47:49 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2000 ls Sep 9 12:47:53 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2001 cd .. Sep 9 12:47:53 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2002 ls Sep 9 12:47:57 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2003 cat service.json Sep 9 13:20:37 bastion LinuxCommandsWazuh: User mohtashim [2604572]: 885 exit Sep 9 13:23:58 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2004 ping 10.2.0.1 Sep 9 13:24:11 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2004 ping 10.2.0.1 Sep 9 13:24:19 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2004 ping 10.2.0.1 Sep 9 13:24:25 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2005 tcptraceroute 10.2.0.1 Sep 9 13:24:53 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2006 sudo tcptraceroute 10.2.0.1 Sep 9 13:24:58 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2007 ping 10.2.0.1 Sep 9 13:25:06 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2008 ping 10.2.0.8 Sep 9 13:25:09 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2009 ping 10.2.0.1 Sep 9 13:28:36 bastion LinuxCommandsWazuh: User mohtashim [2604572]: 886 mongo pixel_v1 Sep 9 13:31:09 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 887 exit Sep 9 13:31:33 bastion LinuxCommandsWazuh: User ankur [2605558]: 1960 exit Sep 9 13:31:35 bastion LinuxCommandsWazuh: User ankur [2605558]: 1961 exity Sep 9 13:32:06 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 888 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 9 13:33:34 bastion LinuxCommandsWazuh: User ankur [2605558]: 1962 byobu Sep 9 13:53:32 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 889 mongo pixel_v12 Sep 9 13:54:15 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 890 mongo pixel_v1 Sep 9 13:57:29 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 891 byobu Sep 9 13:57:32 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 891 byobu Sep 9 14:07:28 bastion LinuxCommandsWazuh: User ankur [2613754]: 1963 exit Sep 9 14:07:29 bastion LinuxCommandsWazuh: User ankur [2613754]: 1964 numfmt Sep 9 14:07:30 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2613754]: 1964 numfmt ] Sep 9 14:08:19 bastion LinuxCommandsWazuh: User ankur [2182299]: 1987 stern cookie-cutter | grep -i "check_funnel_for_high_intent_customers" Sep 9 14:08:28 bastion LinuxCommandsWazuh: User ankur [2182299]: 1987 stern cookie-cutter | grep -i "check_funnel_for_high_intent_customers" Sep 9 14:10:46 bastion LinuxCommandsWazuh: User ankur [2182299]: 1988 stern cookie-cutter | grep -i ">>HIGH-INTENT-CONFIRMING-CHECK-f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 14:11:13 bastion LinuxCommandsWazuh: User ankur [2182299]: 1988 stern cookie-cutter | grep -i ">>HIGH-INTENT-CONFIRMING-CHECK-f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 14:11:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2182299]: 1988 stern cookie-cutter | grep -i ">>HIGH-INTENT-CONFIRMING-CHECK-f910f575-7f96-47d7-a161-7cc322a492e7"] Sep 9 14:11:24 bastion LinuxCommandsWazuh: User ankur [2613754]: 1965 byobu Sep 9 14:14:42 bastion LinuxCommandsWazuh: User abhijeet [2600451]: 2010 ping 10.2.0.1ls Sep 9 14:32:19 bastion LinuxCommandsWazuh: User mohtashim [2605463]: 892 mongo pixel_v1 Sep 9 14:36:20 bastion LinuxCommandsWazuh: User ankur [2620056]: 1966 exit Sep 9 15:28:13 bastion LinuxCommandsWazuh: User ashish [2671788]: 441 mongo Sep 9 15:28:20 bastion LinuxCommandsWazuh: User ashish [2671967]: 441 mongo Sep 9 15:28:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2671967]: 441 mongo] Sep 9 15:28:33 bastion LinuxCommandsWazuh: User ashish [2671967]: 442 kubectl get pods Sep 9 15:29:15 bastion LinuxCommandsWazuh: User ashish [2671967]: 443 history | grep stern Sep 9 15:30:02 bastion LinuxCommandsWazuh: User ashish [2671967]: 444 stern cookie-cutter-common-task Sep 9 15:30:25 bastion LinuxCommandsWazuh: User ashish [2671967]: 445 stern cookie-cutter Sep 9 15:31:18 bastion LinuxCommandsWazuh: User ashish [2671967]: 446 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT>> __FETCH_AND_EMAIL_CAMPAIGN_ANALYTICS_FOR_ORG__" Sep 9 15:31:19 bastion LinuxCommandsWazuh: User ashish [2671967]: 446 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT>> __FETCH_AND_EMAIL_CAMPAIGN_ANALYTICS_FOR_ORG__" Sep 9 15:41:30 bastion LinuxCommandsWazuh: User ankur [2182299]: 1989 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=" Sep 9 15:41:38 bastion LinuxCommandsWazuh: User ankur [2182299]: 1989 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=" Sep 9 15:43:37 bastion LinuxCommandsWazuh: User ankur [2182299]: 1990 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 15:44:06 bastion LinuxCommandsWazuh: User ashish [2671967]: 446 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT>> __FETCH_AND_EMAIL_CAMPAIGN_ANALYTICS_FOR_ORG__" Sep 9 15:44:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [2671967]: 446 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT>> __FETCH_AND_EMAIL_CAMPAIGN_ANALYTICS_FOR_ORG__"] Sep 9 15:44:08 bastion LinuxCommandsWazuh: User ashish [2671788]: 442 byobu Sep 9 15:50:30 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 1998 exit Sep 9 15:50:44 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 1999 kubectl get pods | grep for Sep 9 15:50:52 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2000 kubectl logs forever-7956ff5b99-f2s2q Sep 9 15:51:48 bastion LinuxCommandsWazuh: User shamailtayyab [2711179]: 1997 ssh ubuntu@10.190.0.29 Sep 9 15:51:51 bastion LinuxCommandsWazuh: User shamailtayyab [2711179]: 1997 ssh ubuntu@10.190.0.29 Sep 9 15:51:52 bastion LinuxCommandsWazuh: User shamailtayyab [2711179]: 1998 ls Sep 9 15:51:58 bastion LinuxCommandsWazuh: User abhijeet [2711405]: 1998 exit Sep 9 15:53:33 bastion LinuxCommandsWazuh: User ankur [2182299]: 1990 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 15:53:34 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2182299]: 1990 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=f910f575-7f96-47d7-a161-7cc322a492e7"] Sep 9 15:53:46 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2001 kubectl logs forever-7956ff5b99-f2s2q --tail 100 -f Sep 9 15:55:23 bastion LinuxCommandsWazuh: User shamailtayyab [2711179]: 1998 ls Sep 9 15:55:24 bastion LinuxCommandsWazuh: User shamailtayyab [2711179]: 1998 ls Sep 9 16:05:41 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2001 kubectl logs forever-7956ff5b99-f2s2q --tail 100 -f Sep 9 16:06:29 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2001 kubectl logs forever-7956ff5b99-f2s2q --tail 100 -f Sep 9 16:06:53 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2001 kubectl logs forever-7956ff5b99-f2s2q --tail 100 -f Sep 9 16:07:41 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2002 kubectl delete pod forever-7956ff5b99-f2s2q Sep 9 16:07:46 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2003 kubectl get pods | grep for Sep 9 16:11:58 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2004 kubectl logs forever-7956ff5b99-npt8r --tail 100 -f Sep 9 16:12:00 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2005 ls Sep 9 16:14:46 bastion LinuxCommandsWazuh: User abhijeet [2709816]: 2006 kubectl logs forever-7956ff5b99-npt8r --tail 100 -f] Sep 9 16:31:43 bastion LinuxCommandsWazuh: User ankur [2182299]: 1990 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 16:38:32 bastion LinuxCommandsWazuh: User ankur [2182299]: 1990 stern cookie-cutter | grep -i "Writing entry in LimechatEventsExporter for org_id=f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 16:41:26 bastion LinuxCommandsWazuh: User ankur [2182299]: 1991 stern cookie-cutter | grep -i "Limechat One of the entries are not received:org=f910f575-7f96-47d7-a161-7cc322a492e7" Sep 9 16:41:27 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2182299]: 1991 stern cookie-cutter | grep -i "Limechat One of the entries are not received:org=f910f575-7f96-47d7-a161-7cc322a492e7"] Sep 9 16:41:28 bastion LinuxCommandsWazuh: User ankur [2620056]: 1967 byobu Sep 9 17:04:16 bastion LinuxCommandsWazuh: User ankur [2762989]: 1968 exit Sep 9 17:05:29 bastion LinuxCommandsWazuh: User ankur [2762989]: 1969 ls Sep 9 17:16:52 bastion LinuxCommandsWazuh: User ankur [2764690]: 1970 exit Sep 9 17:17:53 bastion LinuxCommandsWazuh: User ankur [3700987]: 1585 psql Sep 9 17:25:48 bastion LinuxCommandsWazuh: User rihan [2773599]: 1316 byobu Sep 9 17:26:52 bastion LinuxCommandsWazuh: User rihan [2773599]: 1317 kubectl get pods | grep munshi Sep 9 17:27:13 bastion LinuxCommandsWazuh: User rihan [2773599]: 1318 kubectl get configmaps Sep 9 17:28:12 bastion LinuxCommandsWazuh: User ankur [2182299]: 1992 k get pods | grep treas\ Sep 9 17:28:14 bastion LinuxCommandsWazuh: User ankur [2182299]: 1993 k get pods | grep treas Sep 9 17:28:19 bastion LinuxCommandsWazuh: User ankur [2182299]: 1994 k get pods | grep rewar Sep 9 17:28:36 bastion LinuxCommandsWazuh: User ankur [2182299]: 1995 k logs -f rewards-be-6cb8f8b9b7-9mnlx Sep 9 17:28:47 bastion LinuxCommandsWazuh: User ankur [2182299]: 1996 stern rewards Sep 9 17:29:24 bastion LinuxCommandsWazuh: User ankur [2182299]: 1997 stern rewards | grep "v1/services/redemption" Sep 9 17:29:25 bastion LinuxCommandsWazuh: User ankur [2182299]: 1997 stern rewards | grep "v1/services/redemption" Sep 9 17:30:36 bastion LinuxCommandsWazuh: User rihan [2773599]: 1319 kubectl edit configmap munshiji-config Sep 9 17:30:54 bastion LinuxCommandsWazuh: User ankur [2779328]: 1970 exit Sep 9 17:31:09 bastion LinuxCommandsWazuh: User ankur [2779328]: 1971 stern cookie-cutter | grep -i " if org_id is None or coupon is None or phone is None or country is None: Sep 9 17:31:57 bastion LinuxCommandsWazuh: User ankur [2182299]: 1998 stern rewards Sep 9 17:32:00 bastion LinuxCommandsWazuh: User ankur [2779328]: 1972 stern cookie-cutter | grep -i "jsv1/coupon/redeem" Sep 9 17:32:48 bastion LinuxCommandsWazuh: User ankur [2182299]: 1998 stern rewards Sep 9 17:32:54 bastion LinuxCommandsWazuh: User ankur [2764690]: 1971 byobu Sep 9 17:37:04 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1882 exit Sep 9 17:37:15 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1883 ssh ubuntu@10.190.0.33 Sep 9 17:37:21 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1884 ls Sep 9 17:37:22 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1885 cd .ssh/ Sep 9 17:37:22 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1886 ls Sep 9 17:37:30 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1887 sudo vi id_rsa.pub Sep 9 17:46:35 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1888 cat id_rsa.pub Sep 9 17:47:56 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1889 ssh ubuntu@10.190.0.33 Sep 9 17:48:18 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1889 ssh ubuntu@10.190.0.33 Sep 9 17:50:00 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1890 ssh ubuntu@10.190.0.112 Sep 9 17:50:15 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1891 ssh ubuntu@10.190.0.29 Sep 9 17:50:36 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1892 ssh ubuntu@10.190.0.7 Sep 9 17:50:48 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1893 ssh ubuntu@10.190.0.77 Sep 9 17:50:59 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1894 ssh ubuntu@10.190.0.54 Sep 9 17:51:10 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1895 ssh ubuntu@10.190.0.8 Sep 9 17:51:17 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1896 ssh ubuntu@ 10.190.0.61 Sep 9 17:51:26 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1897 ssh ubuntu@10.190.0.61 Sep 9 18:08:42 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1898 cd Sep 9 18:08:42 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1899 ls Sep 9 18:08:49 bastion LinuxCommandsWazuh: User venky [2785300]: 1998 byobu Sep 9 18:08:50 bastion LinuxCommandsWazuh: User venky [2785300]: 1999 cd Sep 9 18:08:50 bastion LinuxCommandsWazuh: User venky [2785300]: 2000 ls Sep 9 18:08:53 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1900 sudo su venky Sep 9 18:12:24 bastion LinuxCommandsWazuh: User ankur [3944233]: 1840 clickhouse-ssh Sep 9 18:13:45 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1901 vi .bashrc Sep 9 18:13:56 bastion LinuxCommandsWazuh: User ankur [3109585]: 1580 clickhouse-ssh Sep 9 18:13:59 bastion LinuxCommandsWazuh: User ankur [758681]: 1483 clickhouse-ssh Sep 9 18:14:19 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1902 cd .. Sep 9 18:14:19 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1903 ls Sep 9 18:14:23 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1904 sudo su abhijeet/ Sep 9 18:14:25 bastion LinuxCommandsWazuh: User abhijeet [2785524]: 1998 exit Sep 9 18:14:30 bastion LinuxCommandsWazuh: User abhijeet [2785524]: 1999 cd Sep 9 18:14:31 bastion LinuxCommandsWazuh: User abhijeet [2785524]: 2000 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:14:40 bastion LinuxCommandsWazuh: User abhijeet [2785524]: 2001 vi .bashrc Sep 9 18:14:42 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1905 sudo su abhijeet Sep 9 18:14:43 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1906 ls Sep 9 18:14:46 bastion LinuxCommandsWazuh: User ak [2785602]: 285 exit Sep 9 18:14:46 bastion LinuxCommandsWazuh: User ak [2785602]: 286 cd Sep 9 18:14:48 bastion LinuxCommandsWazuh: User ak [2785602]: 287 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:14:50 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1907 sudo su ak Sep 9 18:14:51 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1908 ls Sep 9 18:14:54 bastion LinuxCommandsWazuh: User ankur [2785648]: 1972 exit Sep 9 18:14:57 bastion LinuxCommandsWazuh: User ankur [2785648]: 1973 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:15:07 bastion LinuxCommandsWazuh: User ankur [2785648]: 1974 vi .bashrc Sep 9 18:15:08 bastion LinuxCommandsWazuh: User ankur [2785648]: 1975 cd Sep 9 18:15:17 bastion LinuxCommandsWazuh: User ankur [2785648]: 1976 vi .bashrc Sep 9 18:15:18 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1909 sudo su ankur Sep 9 18:15:19 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1910 ls Sep 9 18:15:26 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1911 sudo su ashish/ Sep 9 18:15:28 bastion LinuxCommandsWazuh: User ashish [2785759]: 447 byobu Sep 9 18:15:29 bastion LinuxCommandsWazuh: User ashish [2785759]: 448 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:15:31 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1912 sudo su ashish Sep 9 18:15:37 bastion LinuxCommandsWazuh: User mohtashim [2785796]: 893 exit Sep 9 18:15:38 bastion LinuxCommandsWazuh: User mohtashim [2785796]: 894 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:15:40 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1913 sudo su mohtashim Sep 9 18:15:45 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1914 sudo su shamailtayyab/ Sep 9 18:15:47 bastion LinuxCommandsWazuh: User shamailtayyab [2785858]: 1997 ls Sep 9 18:15:48 bastion LinuxCommandsWazuh: User shamailtayyab [2785858]: 1998 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:15:49 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1915 sudo su shamailtayyab Sep 9 18:15:59 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1916 sudo su adil/ Sep 9 18:16:03 bastion LinuxCommandsWazuh: User adil [2786501]: 167 mongo Sep 9 18:16:04 bastion LinuxCommandsWazuh: User adil [2786501]: 168 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:16:06 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1917 sudo su adil Sep 9 18:16:06 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1918 ls Sep 9 18:16:11 bastion LinuxCommandsWazuh: User akansha [2786542]: 3 sudo su shamailtayyab Sep 9 18:16:12 bastion LinuxCommandsWazuh: User akansha [2786542]: 4 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:16:14 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1919 sudo su akansha Sep 9 18:16:17 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1920 sudo su anshika/ Sep 9 18:16:19 bastion LinuxCommandsWazuh: User anshika [2786583]: 166 exit Sep 9 18:16:20 bastion LinuxCommandsWazuh: User anshika [2786583]: 167 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:16:21 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1921 sudo su anshika Sep 9 18:16:22 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1922 ls Sep 9 18:16:27 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1923 sudo su rihan/ Sep 9 18:16:31 bastion LinuxCommandsWazuh: User rihan [2786628]: 1316 byobu Sep 9 18:16:32 bastion LinuxCommandsWazuh: User rihan [2786628]: 1317 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:16:34 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1924 sudo su rihan Sep 9 18:16:40 bastion LinuxCommandsWazuh: User venky [2786659]: 1998 exit Sep 9 18:16:41 bastion LinuxCommandsWazuh: User venky [2786659]: 1999 echo 'alias redis-ssh="ssh ubuntu@10.190.0.7"#012alias redis-url-ssh="ssh ubuntu@10.190.0.61"#012alias dragonflydb-volatile-ssh="ssh ubuntu@10.190.0.112"#012alias redis-secondary-ssh="ssh ubuntu@10.190.0.8"#012alias mongo-ssh="ssh ubuntu@10.190.0.29"#012alias clickhouse-ssh="ssh ubuntu@10.190.0.77"#012alias nitrox-production-elk-ssh="ssh ubuntu@10.190.0.54"' >> ~/.bashrc && source ~/.bashrc Sep 9 18:17:04 bastion LinuxCommandsWazuh: User venky [2786659]: 2000 cd Sep 9 18:17:05 bastion LinuxCommandsWazuh: User venky [2786659]: 2001 ls Sep 9 18:17:06 bastion LinuxCommandsWazuh: User venky [2786659]: 2002 cd .ssh/ Sep 9 18:17:06 bastion LinuxCommandsWazuh: User venky [2786659]: 2003 ls Sep 9 18:17:16 bastion LinuxCommandsWazuh: User venky [2786659]: 2004 sudo vi id_rsa.pub Sep 9 18:17:47 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1925 sudo su venky Sep 9 18:17:49 bastion LinuxCommandsWazuh: User rihan [2786768]: 1324 exit Sep 9 18:17:50 bastion LinuxCommandsWazuh: User rihan [2786768]: 1325 cd Sep 9 18:17:56 bastion LinuxCommandsWazuh: User rihan [2786768]: 1326 cat .ssh/id_rsa.pub Sep 9 18:18:04 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1926 sudo su rihan Sep 9 18:18:08 bastion LinuxCommandsWazuh: User anshika [2786806]: 174 exit Sep 9 18:18:09 bastion LinuxCommandsWazuh: User anshika [2786806]: 175 cd Sep 9 18:18:10 bastion LinuxCommandsWazuh: User anshika [2786806]: 176 cd .ssh/ Sep 9 18:18:13 bastion LinuxCommandsWazuh: User anshika [2786806]: 177 cat id_rsa.pub Sep 9 18:18:23 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1927 sudo su anshika Sep 9 18:18:23 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1928 ls Sep 9 18:18:37 bastion LinuxCommandsWazuh: User adil [2786856]: 175 exit Sep 9 18:18:38 bastion LinuxCommandsWazuh: User adil [2786856]: 176 cd Sep 9 18:18:41 bastion LinuxCommandsWazuh: User adil [2786856]: 177 cat .ssh/ Sep 9 18:18:50 bastion LinuxCommandsWazuh: User adil [2786856]: 178 ls Sep 9 18:18:53 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1929 sudo su adil Sep 9 18:18:54 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1930 ls Sep 9 18:21:41 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1930 ls Sep 9 18:21:45 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1931 cd abhijeet Sep 9 18:21:46 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1932 ls Sep 9 18:21:47 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1933 cd .ssh/ Sep 9 18:21:47 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1934 ls Sep 9 18:21:51 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1935 cd .ssh/ Sep 9 18:21:51 bastion LinuxCommandsWazuh: User ubuntu [2781970]: 1936 ls Sep 9 18:22:02 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1937 exit Sep 9 18:22:05 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 1998 exit Sep 9 18:22:05 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 1999 cd Sep 9 18:22:06 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 2000 ls Sep 9 18:22:07 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 2001 cd .ssh/ Sep 9 18:22:07 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 2002 s Sep 9 18:22:08 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 2003 ls Sep 9 18:22:10 bastion LinuxCommandsWazuh: User abhijeet [2787215]: 2004 cat id_rsa.pub Sep 9 18:22:19 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1938 sudo su abhijeet Sep 9 18:22:22 bastion LinuxCommandsWazuh: User ankur [2787291]: 1983 exit Sep 9 18:22:22 bastion LinuxCommandsWazuh: User ankur [2787291]: 1984 cd Sep 9 18:22:22 bastion LinuxCommandsWazuh: User ankur [2787291]: 1985 ls Sep 9 18:22:23 bastion LinuxCommandsWazuh: User ankur [2787291]: 1986 cd .ssh/ Sep 9 18:22:24 bastion LinuxCommandsWazuh: User ankur [2787291]: 1987 ks Sep 9 18:22:27 bastion LinuxCommandsWazuh: User ankur [2787291]: 1988 cat id_rsa.pub Sep 9 18:22:39 bastion LinuxCommandsWazuh: User ankur [2787291]: 1989 cd Sep 9 18:22:40 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1939 sudo su ankur Sep 9 18:22:46 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1940 cd .. Sep 9 18:22:50 bastion LinuxCommandsWazuh: User shamailtayyab [2787397]: 1997 exit Sep 9 18:22:51 bastion LinuxCommandsWazuh: User shamailtayyab [2787397]: 1998 cd Sep 9 18:22:55 bastion LinuxCommandsWazuh: User shamailtayyab [2787397]: 1999 cd .ssh/ Sep 9 18:22:56 bastion LinuxCommandsWazuh: User shamailtayyab [2787397]: 2000 cat id_rsa.pub Sep 9 18:23:16 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1941 sudo su shamailtayyab Sep 9 18:23:19 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 1 exit Sep 9 18:23:20 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 2 cd Sep 9 18:23:20 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 3 ls Sep 9 18:23:23 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 4 cd .ssh/ Sep 9 18:23:25 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 5 cat id_rsa.pub Sep 9 18:25:29 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 6 cd Sep 9 18:25:47 bastion LinuxCommandsWazuh: User aman [2787626]: 216 exit Sep 9 18:25:48 bastion LinuxCommandsWazuh: User aman [2787626]: 217 clear Sep 9 18:25:53 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 7 redis-url-ssh Sep 9 18:31:05 bastion LinuxCommandsWazuh: User ashish [2788576]: 455 exit Sep 9 18:31:08 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ashish [2788576]: 455 exit] Sep 9 18:31:14 bastion LinuxCommandsWazuh: User ashish [2788660]: 455 exit Sep 9 18:35:49 bastion LinuxCommandsWazuh: User abhijeet [2793769]: 1998 exit Sep 9 18:55:13 bastion LinuxCommandsWazuh: User ankur [2812799]: 1990 exit Sep 9 18:55:16 bastion LinuxCommandsWazuh: User ankur [2812967]: 1990 exit Sep 9 18:55:25 bastion LinuxCommandsWazuh: User ankur [2812967]: 1991 k get configmaps Sep 9 19:01:18 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 7 redis-url-ssh Sep 9 19:01:19 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 7 redis-url-ssh Sep 9 19:01:19 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 7 redis-url-ssh Sep 9 19:01:48 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 8 alias kafka-ssh="ssh ubuntu@10.190.0.87"' >> ~/.bashrc && source ~/.bashrc Sep 9 19:01:54 bastion LinuxCommandsWazuh: User mohtashim [2787448]: 8 alias kafka-ssh="ssh ubuntu@10.190.0.87"' >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:16 bastion LinuxCommandsWazuh: User mohtashim [2787448]: alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:18 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1942 sudo su mohtashim Sep 9 19:02:27 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1943 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:32 bastion LinuxCommandsWazuh: User ankur [2827319]: 1990 exit Sep 9 19:02:33 bastion LinuxCommandsWazuh: User ankur [2827319]: 1991 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:34 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1944 sudo su ankur Sep 9 19:02:39 bastion LinuxCommandsWazuh: User rihan [2827548]: 1330 kubectl edit configmap munshiji-config Sep 9 19:02:40 bastion LinuxCommandsWazuh: User rihan [2827548]: 1331 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:41 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1945 sudo su rihan Sep 9 19:02:46 bastion LinuxCommandsWazuh: User venky [2827811]: 1998 exit Sep 9 19:02:47 bastion LinuxCommandsWazuh: User venky [2827811]: 1999 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:48 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1946 sudo su venky Sep 9 19:02:52 bastion LinuxCommandsWazuh: User shamailtayyab [2828035]: 1997 exit Sep 9 19:02:53 bastion LinuxCommandsWazuh: User shamailtayyab [2828035]: 1998 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:02:57 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1947 sudo su shamailtayyab Sep 9 19:03:08 bastion LinuxCommandsWazuh: User abhijeet [2828530]: 1998 mongo-ssh Sep 9 19:03:09 bastion LinuxCommandsWazuh: User abhijeet [2828530]: 1999 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:03:10 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1948 sudo su abhijeet Sep 9 19:06:48 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1949 alias kafka-ssh="ssh ubuntu@10.190.0.87" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:08 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1950 alias sentry-ssh="ssh ubuntu@10.190.15.196" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:17 bastion LinuxCommandsWazuh: User abhijeet [2836818]: 1998 exit Sep 9 19:07:18 bastion LinuxCommandsWazuh: User abhijeet [2836818]: 1999 alias sentry-ssh="ssh ubuntu@10.190.15.196" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:19 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1951 sudo su abhijeet Sep 9 19:07:22 bastion LinuxCommandsWazuh: User venky [2837012]: 1998 exit Sep 9 19:07:22 bastion LinuxCommandsWazuh: User venky [2837012]: 1999 alias sentry-ssh="ssh ubuntu@10.190.15.196" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:24 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1952 sudo su venky Sep 9 19:07:33 bastion LinuxCommandsWazuh: User shamailtayyab [2837412]: 1997 exit Sep 9 19:07:34 bastion LinuxCommandsWazuh: User shamailtayyab [2837412]: 1998 alias sentry-ssh="ssh ubuntu@10.190.15.196" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:35 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1953 sudo su shamailtayyab Sep 9 19:07:37 bastion LinuxCommandsWazuh: User rihan [2837563]: 1332 exit Sep 9 19:07:38 bastion LinuxCommandsWazuh: User rihan [2837563]: 1333 alias sentry-ssh="ssh ubuntu@10.190.15.196" >> ~/.bashrc && source ~/.bashrc Sep 9 19:07:40 bastion LinuxCommandsWazuh: User ubuntu [2787199]: 1954 sudo su rihan Sep 9 19:07:54 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1955 exit Sep 9 19:10:26 bastion LinuxCommandsWazuh: User abhijeet [2842997]: 1998 exit Sep 9 19:13:57 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1956 ls Sep 9 19:14:30 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2838184]: 1956 ls] Sep 9 19:14:34 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1957 cd bin/ Sep 9 19:14:34 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1958 ls Sep 9 19:18:36 bastion LinuxCommandsWazuh: User abhijeet [2842997]: 1999 mongo-ssh Sep 9 19:28:23 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1959 sudo vi ssh_monitor.sh Sep 9 19:29:34 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1959 sudo vi ssh_monitor.sh Sep 9 19:29:54 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1960 sudo chmod +x ssh_monitor.sh Sep 9 19:30:05 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1961 ./ssh_monitor.sh Sep 9 19:30:18 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1962 sudo vi ssh_monitor.sh Sep 9 19:33:08 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1963 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:17 bastion LinuxCommandsWazuh: User venky [2886767]: 1998 exit Sep 9 19:33:18 bastion LinuxCommandsWazuh: User venky [2886767]: 1999 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:19 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1964 sudo su venky Sep 9 19:33:24 bastion LinuxCommandsWazuh: User abhijeet [2887025]: 1998 exit Sep 9 19:33:25 bastion LinuxCommandsWazuh: User abhijeet [2887025]: 1999 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:27 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1965 sudo su abhijeet Sep 9 19:33:31 bastion LinuxCommandsWazuh: User shamailtayyab [2887260]: 1997 exit Sep 9 19:33:31 bastion LinuxCommandsWazuh: User shamailtayyab [2887260]: 1998 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:32 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1966 sudo su shamailtayyab Sep 9 19:33:35 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1967 sudo su riahn Sep 9 19:33:37 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1967 sudo su riahn Sep 9 19:33:39 bastion LinuxCommandsWazuh: User rihan [2887562]: 1334 exit Sep 9 19:33:40 bastion LinuxCommandsWazuh: User rihan [2887562]: 1335 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:41 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1968 sudo su rihan Sep 9 19:33:50 bastion LinuxCommandsWazuh: User ayush [2887911]: 448 exit Sep 9 19:33:51 bastion LinuxCommandsWazuh: User ayush [2887911]: 449 alias gpu-ssh="ssh ubuntu@10.148.0.2" >> ~/.bashrc && source ~/.bashrc Sep 9 19:33:53 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1969 sudo su ayush Sep 9 19:34:48 bastion LinuxCommandsWazuh: User abhijeet [2889823]: 1998 exit Sep 9 19:36:31 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1970 crontab -e Sep 9 19:36:34 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1971 .//home/ubuntu/bin/ssh_monitor.sh Sep 9 19:36:36 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1972 ./home/ubuntu/bin/ssh_monitor.sh Sep 9 19:36:42 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1973 pwd Sep 9 19:36:50 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1974 ls Sep 9 19:36:53 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1975 cat ssh_monitor.sh Sep 9 19:37:00 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1976 sudo chmod +x ssh_monitor.sh Sep 9 19:37:04 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1977 ./home/ubuntu/bin/ssh_monitor.sh Sep 9 19:37:09 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1978 pwd Sep 9 19:37:32 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1979 bash /home/ubuntu/bin/ssh_monitor.sh Sep 9 19:37:36 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1979 bash /home/ubuntu/bin/ssh_monitor.sh Sep 9 19:37:38 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1980 .//home/ubuntu/bin/ssh_monitor.sh Sep 9 19:37:40 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1981 ./home/ubuntu/bin/ssh_monitor.sh Sep 9 19:37:44 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1982 cd Sep 9 19:37:45 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1983 ./home/ubuntu/bin/ssh_monitor.sh Sep 9 19:38:23 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1984 /home/ubuntu/bin/ssh_monitor.sh Sep 9 19:38:26 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1985 chmod +x /home/ubuntu/bin/ssh_monitor.sh Sep 9 19:38:28 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1986 sudo chmod +x /home/ubuntu/bin/ssh_monitor.sh Sep 9 19:38:47 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1987 crontab -e Sep 9 19:38:56 bastion LinuxCommandsWazuh: User ankur [2812967]: 1992 k edit configmaps house-of-click-config Sep 9 19:39:15 bastion LinuxCommandsWazuh: User ankur [2812799]: 1991 byobu Sep 9 19:47:42 bastion LinuxCommandsWazuh: User abhijeet [2889823]: 1999 ls Sep 9 19:48:30 bastion LinuxCommandsWazuh: User abhijeet [2898503]: 1998 exit Sep 9 19:48:31 bastion LinuxCommandsWazuh: User abhijeet [2898503]: 1999 ls Sep 9 19:50:58 bastion LinuxCommandsWazuh: User ubuntu [2838184]: 1987 crontab -e Sep 9 19:50:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2838184]: 1987 crontab -e] Sep 9 19:51:05 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1988 exit Sep 9 19:52:02 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1989 ssh ubuntu@10.190.0.29 Sep 9 19:52:54 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 1998 exit Sep 9 20:00:45 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1990 cd bin/ Sep 9 20:00:46 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1991 ls Sep 9 20:00:47 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1992 cat ssh_monitor.sh Sep 9 20:03:19 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 1999 redis-ssh Sep 9 20:03:20 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 2000 ls Sep 9 20:03:48 bastion LinuxCommandsWazuh: User ubuntu [2898722]: 1992 cat ssh_monitor.sh Sep 9 20:03:48 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2898722]: 1992 cat ssh_monitor.sh ] Sep 9 20:04:39 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 2001 redis-url-ssh Sep 9 20:06:43 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 2002 dragonflydb-volatile-ssh Sep 9 20:19:24 bastion LinuxCommandsWazuh: User ubuntu [2901668]: 1993 exit Sep 9 20:24:14 bastion LinuxCommandsWazuh: User ubuntu [2901668]: 1994 redis-ssh Sep 9 20:24:17 bastion LinuxCommandsWazuh: User ubuntu [2901668]: 1995 05febb92-fa11-4e0b-94bc-7c77168c72c7 Sep 9 20:24:19 bastion LinuxCommandsWazuh: User ubuntu [2901668]: 1995 05febb92-fa11-4e0b-94bc-7c77168c72c7 Sep 9 20:35:55 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 1996 exit Sep 9 20:52:33 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 1996 exit Sep 9 20:52:38 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 1997 cd .ssh/ Sep 9 20:52:49 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 1998 sudo vi authorized_keys Sep 9 20:54:52 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 1997 redis-url-ssh Sep 9 20:54:55 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 1998 redis- Sep 9 20:55:12 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 1999 redis-ssh Sep 9 20:55:21 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2000 cd .ssh/ Sep 9 20:55:30 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2001 sudo vi authorized_keys Sep 9 20:56:24 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2002 mongo-ssh Sep 9 20:57:18 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2003 redis-secondary-ssh Sep 9 20:57:22 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2004 cd Sep 9 20:57:55 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2005 dragonflydb-volatile-ssh Sep 9 20:57:59 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2006 sudo vi bash.sh Sep 9 20:58:01 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2007 cd .ssh/ Sep 9 20:58:25 bastion LinuxCommandsWazuh: User ubuntu [2903493]: 2008 sudo vi authorized_keys Sep 9 20:58:48 bastion LinuxCommandsWazuh: User ubuntu [2906278]: 1999 exit Sep 9 21:04:51 bastion LinuxCommandsWazuh: User abhijeet [2907002]: 1998 exit Sep 9 21:04:52 bastion LinuxCommandsWazuh: User abhijeet [2907002]: 1999 ls Sep 9 21:10:17 bastion LinuxCommandsWazuh: User ubuntu [2906278]: 2000 redis-url-ssh Sep 9 21:20:02 bastion LinuxCommandsWazuh: User abhijeet [2898503]: 2000 redis-ssh Sep 9 21:20:02 bastion LinuxCommandsWazuh: User abhijeet [2898503]: 2001 ls Sep 9 21:20:48 bastion LinuxCommandsWazuh: User abhijeet [2898834]: 2003 redis-secondary-ssh Sep 9 21:23:16 bastion LinuxCommandsWazuh: User abhijeet [2908900]: 1998 exit Sep 9 21:23:26 bastion LinuxCommandsWazuh: User ubuntu [2906278]: 2001 redis-ssh Sep 9 21:30:53 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 1999 cd Sep 9 21:32:22 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2000 redis-ssh Sep 9 21:32:24 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2001 cd bin/ Sep 9 21:32:24 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2002 ls Sep 9 21:32:26 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2003 cat ssh_monitor.sh Sep 9 21:37:39 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2004 sudo vi nmap.sh Sep 9 21:37:56 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2005 sudo vi nmap.sh Sep 9 21:38:08 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2006 sudo chmod +x nmap.sh Sep 9 21:38:46 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2007 ./nmap.sh Sep 9 21:40:39 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2008 cat nmap.sh Sep 9 21:44:18 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2009 ls Sep 9 21:44:35 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2009 ls Sep 9 21:45:21 bastion LinuxCommandsWazuh: User ubuntu [2906278]: 2002 mongo-ssh Sep 9 21:45:23 bastion LinuxCommandsWazuh: User ubuntu [2906278]: 2002 mongo-ssh Sep 9 21:49:07 bastion LinuxCommandsWazuh: User ping-pong [2911430]: 52 exit Sep 9 21:49:09 bastion LinuxCommandsWazuh: User ping-pong [2911430]: 53 ls Sep 9 21:50:38 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2009 ls Sep 9 21:50:40 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2009 ls Sep 9 21:51:16 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2010 sudo vi nmap.sh Sep 9 21:51:18 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2011 ./nmap.sh Sep 9 21:51:38 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2012 sudo ./nmap.sh Sep 9 21:52:03 bastion LinuxCommandsWazuh: User abhijeet [2907002]: 2000 redis-url-ssh Sep 9 21:52:31 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2013 sudo vi nmap.sh Sep 9 21:52:32 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2014 ./nmap.sh Sep 9 21:52:43 bastion LinuxCommandsWazuh: User ubuntu [2905195]: 2015 sudo ./nmap.sh Sep 9 21:57:02 bastion LinuxCommandsWazuh: User ping-pong [2911430]: 54 mongo Sep 9 22:36:13 bastion LinuxCommandsWazuh: User ping-pong [2911430]: 54 mongo Sep 9 23:24:49 bastion LinuxCommandsWazuh: User ping-pong [2911430]: 54 mongo Sep 9 23:24:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ping-pong [2911430]: 54 mongo]