Sep 18 02:18:49 bastion LinuxCommandsWazuh: User ping-pong [288877]: 54 mongo Sep 18 02:21:13 bastion LinuxCommandsWazuh: User ping-pong [288877]: 54 mongo Sep 18 03:40:59 bastion LinuxCommandsWazuh: User ping-pong [372194]: 55 exit Sep 18 03:45:55 bastion LinuxCommandsWazuh: User ping-pong [372194]: 56 mongo Sep 18 03:45:56 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ping-pong [372194]: 56 mongo] Sep 18 10:58:47 bastion LinuxCommandsWazuh: User ankur [813989]: 1990 exit Sep 18 10:58:49 bastion LinuxCommandsWazuh: User ankur [814084]: 1990 exit Sep 18 11:01:33 bastion LinuxCommandsWazuh: User ankur [814084]: 1991 k get pods | grep big Sep 18 11:05:06 bastion LinuxCommandsWazuh: User ankur [814084]: 1992 k logs -f big-o-cookie-cutter-84cc6df899-szjhd Sep 18 11:23:07 bastion LinuxCommandsWazuh: User ankur [860830]: 1990 exit Sep 18 11:33:30 bastion LinuxCommandsWazuh: User ankur [860830]: 1991 elk-server Sep 18 12:13:26 bastion LinuxCommandsWazuh: User abhijeet [958630]: 1998 redis-url-ssh Sep 18 12:14:40 bastion LinuxCommandsWazuh: User ankur [961011]: 1990 exit Sep 18 12:14:43 bastion LinuxCommandsWazuh: User ankur [961187]: 1990 exit Sep 18 12:14:47 bastion LinuxCommandsWazuh: User ankur [814084]: 1993 stern big-o-cookie-cutter Sep 18 12:58:15 bastion LinuxCommandsWazuh: User ankur [814084]: 1993 stern big-o-cookie-cutter Sep 18 12:58:24 bastion LinuxCommandsWazuh: User ankur [814084]: 1993 stern big-o-cookie-cutter Sep 18 12:58:24 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [814084]: 1993 stern big-o-cookie-cutter] Sep 18 12:59:40 bastion LinuxCommandsWazuh: User rihan [2514982]: 1356 mongo Sep 18 12:59:44 bastion LinuxCommandsWazuh: User rihan [2514982]: 1357 stty sane Sep 18 12:59:54 bastion LinuxCommandsWazuh: User rihan [2514982]: 1358 mongo Sep 18 12:59:57 bastion LinuxCommandsWazuh: User rihan [3619205]: 1369 byobu Sep 18 13:00:00 bastion LinuxCommandsWazuh: User rihan [1052410]: 1374 make nitrox-bash Sep 18 13:02:29 bastion LinuxCommandsWazuh: User rihan [1052410]: 1375 mongo Sep 18 13:02:29 bastion LinuxCommandsWazuh: User rihan [3619205]: 1369 byobu Sep 18 13:05:45 bastion LinuxCommandsWazuh: User rihan [1060435]: 1375 mongo Sep 18 13:06:14 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 1998 redis-url-ssh Sep 18 13:06:20 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 1999 kubectl get pvc Sep 18 13:06:56 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2000 kubectl get pvc database-data -o yaml Sep 18 13:10:13 bastion LinuxCommandsWazuh: User ankur [814084]: 1994 k logs -f big-o-cookie-cutter-cf97444cd-f5n4l Sep 18 13:10:13 bastion LinuxCommandsWazuh: message repeated 24 times: [ User ankur [814084]: 1994 k logs -f big-o-cookie-cutter-cf97444cd-f5n4l] Sep 18 13:11:11 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2001 kubectl get pv Sep 18 13:11:28 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2002 kubectl get pvc Sep 18 13:11:43 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2003 kubectl get pvc database-data -o yaml Sep 18 13:26:34 bastion LinuxCommandsWazuh: User ankur [814084]: 1995 stern big-o-cookie-cutter Sep 18 13:27:11 bastion LinuxCommandsWazuh: User rihan [1060435]: 1376 make cookie-bash Sep 18 13:28:03 bastion LinuxCommandsWazuh: User rihan [3619205]: 1370 mongo Sep 18 13:30:23 bastion LinuxCommandsWazuh: User ankur [814084]: 1996 k logs -f big-o-cookie-cutter-7bf96bc54b-l9l64 Sep 18 13:32:31 bastion LinuxCommandsWazuh: User ankur [814084]: 1996 k logs -f big-o-cookie-cutter-7bf96bc54b-l9l64 Sep 18 13:32:32 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [814084]: 1996 k logs -f big-o-cookie-cutter-7bf96bc54b-l9l64] Sep 18 13:32:36 bastion LinuxCommandsWazuh: User ankur [814084]: 1997 stern big-o-cookie-cutter Sep 18 13:36:56 bastion LinuxCommandsWazuh: User mohtashim [1093078]: 1030 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 13:36:58 bastion LinuxCommandsWazuh: User mohtashim [1093078]: 1031 clear Sep 18 13:47:08 bastion LinuxCommandsWazuh: User ankur [814084]: 1998 k logs -f big-o-cookie-cutter-548784f759-pqzws Sep 18 13:47:08 bastion LinuxCommandsWazuh: message repeated 42 times: [ User ankur [814084]: 1998 k logs -f big-o-cookie-cutter-548784f759-pqzws] Sep 18 14:10:48 bastion LinuxCommandsWazuh: User ankur [1127408]: 1990 byobu Sep 18 14:10:59 bastion LinuxCommandsWazuh: User ankur [1127408]: 1991 k get hpa Sep 18 14:11:22 bastion LinuxCommandsWazuh: User ankur [1127408]: 1992 stern cookie-cutter-queues | grep "PxxO" Sep 18 14:11:34 bastion LinuxCommandsWazuh: User ankur [1127408]: 1992 stern cookie-cutter-queues | grep "PxxO" Sep 18 14:11:46 bastion LinuxCommandsWazuh: User ankur [1127408]: 1993 stern cookie-cutter-queues | grep "PxxO: Exporter took" Sep 18 14:13:07 bastion LinuxCommandsWazuh: User ankur [1127408]: 1993 stern cookie-cutter-queues | grep "PxxO: Exporter took" Sep 18 14:13:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1127408]: 1993 stern cookie-cutter-queues | grep "PxxO: Exporter took"] Sep 18 14:20:45 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 1997 k logs -f dakiya-68595f49b-stcdq Sep 18 14:20:46 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 1998 ls Sep 18 14:20:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [1137665]: 1998 ls] Sep 18 14:20:52 bastion LinuxCommandsWazuh: User ankur [1127408]: 1994 k get hpa Sep 18 14:21:00 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 1999 k get pods | grep big Sep 18 14:21:54 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 1999 k get pods | grep big Sep 18 14:21:59 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 2000 k exec -it big-o-cookie-cutter-d6b754546-pwckr bash Sep 18 14:22:04 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 2001 k exec -it big-o-cookie-cutter-d6b754546-pwckr /bin/bash Sep 18 14:23:12 bastion LinuxCommandsWazuh: User ankur [1127408]: 1995 k get pods | grep big Sep 18 14:23:20 bastion LinuxCommandsWazuh: User ankur [1127408]: 1996 k get deploy Sep 18 14:24:01 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 2002 k exec -it big-o-cookie-cutter-d6b754546-pwckr /bin/sh Sep 18 14:24:21 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 2003 k logs -f big-o-cookie-cutter-d6b754546-pwckr Sep 18 14:26:45 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:27:02 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [1127408]: 1997 k top pods | grep big-o-c] Sep 18 14:32:02 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:32:04 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:32:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1127408]: 1997 k top pods | grep big-o-c] Sep 18 14:32:15 bastion LinuxCommandsWazuh: User shamailtayyab [1137665]: 2004 k exec -it big-o-cookie-cutter-d6b754546-pwckr /bin/sh Sep 18 14:33:02 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2004 ls Sep 18 14:33:06 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2005 kubectl ls Sep 18 14:33:36 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2006 ls Sep 18 14:34:18 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:34:25 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1127408]: 1997 k top pods | grep big-o-c] Sep 18 14:34:25 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2007 vim mysql-configmap.yaml Sep 18 14:34:25 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:34:26 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:34:26 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:34:32 bastion LinuxCommandsWazuh: message repeated 19 times: [ User ankur [1127408]: 1997 k top pods | grep big-o-c] Sep 18 14:34:33 bastion LinuxCommandsWazuh: User ankur [1127408]: 1997 k top pods | grep big-o-c Sep 18 14:34:35 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [1127408]: 1997 k top pods | grep big-o-c] Sep 18 14:35:06 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2008 vim wordpress-configmap.yaml Sep 18 14:35:07 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2009 ls Sep 18 14:35:29 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2010 #kubectl apply -f mysql-configmap.yaml -n nitrox-production Sep 18 14:35:35 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2010 #kubectl apply -f mysql-configmap.yaml -n nitrox-production Sep 18 14:35:47 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2011 #kubectl apply -f wordpress-configmap.yaml -n nitrox-production Sep 18 14:46:34 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2012 rm wordpress-configmap.yaml nitrox-dramati Sep 18 14:46:47 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2013 rm wordpress-configmap.yaml mysql-configmap.yaml Sep 18 14:46:51 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2014 ls Sep 18 14:46:59 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2014 ls Sep 18 14:47:13 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2015 vim wordpress-configmap.yaml Sep 18 14:49:21 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2016 #kubectl apply -f wordpress-configmap.yaml -n nitrox-production Sep 18 14:49:28 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2016 #kubectl apply -f wordpress-configmap.yaml -n nitrox-production Sep 18 14:49:31 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2017 cat wordpress-configmap.yaml Sep 18 14:50:13 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2018 kubectl apply -f wordpress-configmap.yaml -n nitrox-production Sep 18 14:50:35 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2019 kubectl get cm -n nitrox-production Sep 18 14:57:28 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2020 vim mysql-pvc.yaml Sep 18 14:57:30 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2021 cat mysql-pvc.yaml Sep 18 14:57:34 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2021 cat mysql-pvc.yaml Sep 18 14:57:57 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2022 kubectl apply -f mysql-pvc.yaml -n nitrox-production Sep 18 14:58:17 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2023 kubectl get pvc -n nitrox-production Sep 18 14:58:32 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2024 kubectl describe pvc abhijeet@bastion:~$ kubectl apply -f mysql-pvc.yaml -n nitrox-production Sep 18 14:58:32 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2025 persistentvolumeclaim/mysql-pv-claim created Sep 18 14:58:55 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2026 kubectl get pvc mysql-pv-claim -n nitrox-production Sep 18 14:59:04 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2027 kubectl describe pvc mysql-pv-claim -n nitrox-production Sep 18 14:59:43 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 1999 dragonflydb-volatile-ssh Sep 18 14:59:48 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 2000 k get pods Sep 18 14:59:50 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 2001 k get pvc Sep 18 14:59:55 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 2002 kubectl get pvc Sep 18 14:59:59 bastion LinuxCommandsWazuh: User ak [1178874]: 294 exit Sep 18 15:00:01 bastion LinuxCommandsWazuh: User ak [1178874]: 295 k get pvc Sep 18 15:00:04 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 2003 sudo su ak Sep 18 15:00:12 bastion LinuxCommandsWazuh: User venky [1179287]: 1998 kubectl edit ing nitrox-production Sep 18 15:00:15 bastion LinuxCommandsWazuh: User venky [1179287]: 1999 k get pvc Sep 18 15:00:17 bastion LinuxCommandsWazuh: User ubuntu [1178516]: 2004 sudo su venky Sep 18 15:00:28 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 1997 k exec -it big-o-cookie-cutter-d6b754546-pwckr /bin/sh Sep 18 15:00:29 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 1998 cd Sep 18 15:00:29 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 1999 ls Sep 18 15:00:32 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2000 k get pvc Sep 18 15:00:43 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2001 k decsribe pvc mysql-pv-claim Sep 18 15:00:53 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2002 k describe pvc mysql-pv-claim Sep 18 15:02:53 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2028 kubectl get pods -n nitrox-prouction Sep 18 15:03:00 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2002 k describe pvc mysql-pv-claim Sep 18 15:03:02 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2003 k get pvc Sep 18 15:03:04 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2003 k get pvc Sep 18 15:03:08 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2029 kubectl get pods -n nitrox-production Sep 18 15:03:24 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2003 k get pvc Sep 18 15:03:26 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2004 k get pods Sep 18 15:03:34 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2030 kubectl get pods -n nitrox-production | grep word Sep 18 15:03:40 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2031 kubectl get pods -n nitrox-production -a | grep word Sep 18 15:03:46 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2032 kubectl get pods -n A | grep word Sep 18 15:03:51 bastion LinuxCommandsWazuh: User shamailtayyab [1179583]: 2004 k get pods Sep 18 15:03:52 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2033 kubectl get pods -a A | grep word Sep 18 15:03:56 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2034 kubectl get pods -n a A | grep word Sep 18 15:04:01 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2035 kubectl get pods -n all -A| grep word Sep 18 15:04:04 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2036 ls Sep 18 15:04:15 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2037 kubectl get all -n A| grep word Sep 18 15:04:26 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2038 kubectl get all -n a| grep word Sep 18 15:04:30 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2039 kubectl get all | grep word Sep 18 15:05:07 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2039 kubectl get all | grep word Sep 18 15:06:12 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2040 kubectl get service Sep 18 15:08:34 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2040 kubectl get service Sep 18 15:08:53 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2041 kubectl get pods | grep word Sep 18 15:08:59 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2042 kubectl logs wordpress-76f47966d7-67r2k Sep 18 15:09:03 bastion LinuxCommandsWazuh: User abhijeet [1061646]: 2043 kubectl logs wordpress-76f47966d7-67r2k -f Sep 18 15:14:05 bastion LinuxCommandsWazuh: User abhijeet [958630]: 1999 internal-server Sep 18 15:14:14 bastion LinuxCommandsWazuh: User abhijeet [958630]: 2000 kubectl get services Sep 18 15:17:18 bastion LinuxCommandsWazuh: User abhijeet [958630]: 2001 kubectl get pods | grep word Sep 18 15:22:11 bastion LinuxCommandsWazuh: User abhijeet [1202000]: 1998 redis-url-ssh Sep 18 15:23:44 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 1998 redis-url-ssh Sep 18 15:23:45 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 1999 ls Sep 18 15:24:28 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2000 kubectl get pods | grep word Sep 18 15:24:34 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2001 docker logs wordpress-76f47966d7-67r2k Sep 18 15:24:42 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2002 kubectl logs wordpress-76f47966d7-67r2k Sep 18 15:25:12 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2003 kubectl logs wordpress-76f47966d7-67r2k -f Sep 18 15:26:30 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2004 kubectl logs wordpress-76f47966d7-67r2k Sep 18 15:30:45 bastion LinuxCommandsWazuh: User mohtashim [1093078]: 1032 mongo pixel_v1 Sep 18 15:33:14 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2005 kubectl exec -it wordpress-76f47966d7-67r2k -- bash Sep 18 15:33:20 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2006 kubectl get ingress Sep 18 15:33:40 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2007 kubectl describe ingress nitrox-procution Sep 18 15:33:59 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2008 kubectl describe ingress nitrox-production Sep 18 15:36:19 bastion LinuxCommandsWazuh: User mohtashim [1217044]: 1033 exit Sep 18 15:36:21 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2009 cool-s Sep 18 15:39:00 bastion LinuxCommandsWazuh: User mohtashim [1217044]: 1034 mongo pixel_v1 Sep 18 15:39:01 bastion LinuxCommandsWazuh: User mohtashim [1217044]: 1035 clear Sep 18 15:44:30 bastion LinuxCommandsWazuh: User abhijeet [1202000]: 1999 internal-server Sep 18 15:44:32 bastion LinuxCommandsWazuh: User abhijeet [1202000]: 2000 exity Sep 18 15:52:11 bastion LinuxCommandsWazuh: User mohtashim [1233028]: 1033 exit Sep 18 15:57:51 bastion LinuxCommandsWazuh: User ashish [1239307]: 475 byobu Sep 18 15:57:52 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1239307]: 475 byobu] Sep 18 15:57:53 bastion LinuxCommandsWazuh: User ashish [1239307]: 476 clear Sep 18 15:57:53 bastion LinuxCommandsWazuh: User ashish [1239307]: 477 ls Sep 18 15:57:55 bastion LinuxCommandsWazuh: User ashish [1239307]: 477 ls Sep 18 15:57:55 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1239307]: 477 ls] Sep 18 16:01:03 bastion LinuxCommandsWazuh: User ashish [1245765]: 475 byobu Sep 18 16:01:05 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1245765]: 475 byobu] Sep 18 16:01:06 bastion LinuxCommandsWazuh: User ashish [1245765]: 476 ls Sep 18 16:02:38 bastion LinuxCommandsWazuh: User ashish [1248759]: 478 byobu Sep 18 16:02:49 bastion LinuxCommandsWazuh: User mohtashim [1233028]: 1034 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 16:02:53 bastion LinuxCommandsWazuh: User mohtashim [1217044]: 1036 mongo pixel_v1 Sep 18 16:27:49 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 1998 exit Sep 18 16:29:00 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 1999 ssh ubuntu@10.190.0.15 Sep 18 16:29:11 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2000 cat .ssh/id_rsa.pub Sep 18 16:30:19 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 1999 sudo su shamailtayyab Sep 18 16:30:20 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2000 cd Sep 18 16:30:22 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2001 cat .ssh/ Sep 18 16:30:29 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2002 cat .ssh/id_rsa.pub Sep 18 16:30:43 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2003 cd Sep 18 16:30:54 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2004 cd /home/ankur/.ssh/ Sep 18 16:30:59 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2005 sudo cd /home/ankur/.ssh/ Sep 18 16:31:02 bastion abhijeet: root@ [1308867]: exit [0] Sep 18 16:31:14 bastion abhijeet: root@ [1308867]: cat /home/ankur/.ssh/id_rsa.pub [0] Sep 18 16:31:32 bastion LinuxCommandsWazuh: User ubuntu [1307479]: 2006 sudo su Sep 18 16:31:33 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2001 sudo su ubuntu Sep 18 16:31:36 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2002 ssh ubuntu@10.190.0.15 Sep 18 16:31:38 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2002 ssh ubuntu@10.190.0.15 Sep 18 16:31:41 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [1302416]: 2002 ssh ubuntu@10.190.0.15] Sep 18 16:31:53 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2003 curl telnet://10.190.0.15 Sep 18 16:31:56 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2004 curl telnet://10.190.0.15:22 Sep 18 16:32:01 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2005 ssh ubuntu@10.190.0.15 Sep 18 16:32:12 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2006 ssh abhijeet@10.190.0.15 Sep 18 16:33:10 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2007 vim .bashrc Sep 18 16:33:18 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2008 source .bashrc Sep 18 16:33:26 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2009 mongodb-1-ssh Sep 18 16:33:32 bastion LinuxCommandsWazuh: User ubuntu [1313683]: 1999 exit Sep 18 16:33:43 bastion LinuxCommandsWazuh: User ubuntu [1313683]: 2000 cd Sep 18 16:33:46 bastion LinuxCommandsWazuh: User ubuntu [1313683]: 2001 ssh abhijeet@10.190.0.15 Sep 18 16:33:57 bastion LinuxCommandsWazuh: User ubuntu [1313683]: 2002 ssh ubuntu@10.190.0.15 Sep 18 16:34:00 bastion LinuxCommandsWazuh: User ubuntu [1313683]: 2002 ssh ubuntu@10.190.0.15 Sep 18 16:34:07 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2010 sudo su ubuntu Sep 18 16:34:13 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2011 mongodb-1-ssh Sep 18 16:34:27 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 1999 exit Sep 18 16:34:28 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 2000 cd Sep 18 16:34:29 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 2001 ls Sep 18 16:34:30 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 2002 ssh abhijeet@10.190.0.15 Sep 18 16:34:39 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 2003 ssh ubuntu@10.190.0.15 Sep 18 16:35:07 bastion LinuxCommandsWazuh: User ubuntu [1315439]: 2003 ssh ubuntu@10.190.0.15 Sep 18 16:35:12 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2012 sudo su ubuntu Sep 18 16:35:16 bastion LinuxCommandsWazuh: User ankur [1317006]: 1990 byobu Sep 18 16:35:17 bastion LinuxCommandsWazuh: User ankur [1317006]: 1991 cd Sep 18 16:35:27 bastion LinuxCommandsWazuh: User ankur [1317006]: 1992 ssh abhijeet@10.190.0.15 Sep 18 16:35:38 bastion LinuxCommandsWazuh: User ankur [1317006]: 1993 ssh ankur@10.190.0.15 Sep 18 16:35:56 bastion LinuxCommandsWazuh: User ankur [1317006]: 1994 vim .bashrc Sep 18 16:36:23 bastion LinuxCommandsWazuh: User ankur [1317006]: 1994 vim .bashrc Sep 18 16:36:29 bastion LinuxCommandsWazuh: User ankur [1317006]: 1995 source .bashrc Sep 18 16:36:36 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2013 sudo su ankur Sep 18 16:40:58 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2014 mongodb-1-ssh Sep 18 16:41:04 bastion LinuxCommandsWazuh: User ankur [1328737]: 1990 exit Sep 18 16:41:05 bastion LinuxCommandsWazuh: User ankur [1328737]: 1991 cd Sep 18 16:41:16 bastion LinuxCommandsWazuh: User ankur [1328737]: 1992 mongodb-1-ssh Sep 18 16:41:54 bastion LinuxCommandsWazuh: User ankur [1328737]: 1993 cat .bashrc Sep 18 16:42:36 bastion LinuxCommandsWazuh: User ankur [1328737]: 1994 mongosh --host 10.190.0.15 Sep 18 16:43:20 bastion LinuxCommandsWazuh: User ankur [1328737]: 1995 vim .bashrc Sep 18 16:43:25 bastion LinuxCommandsWazuh: User ankur [1328737]: 1996 source .bashrc Sep 18 16:43:31 bastion LinuxCommandsWazuh: User ankur [1328737]: 1997 mongodb-1 Sep 18 16:43:37 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2015 sudo su ankur Sep 18 16:44:22 bastion LinuxCommandsWazuh: User mohtashim [1332964]: 1038 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 16:46:15 bastion LinuxCommandsWazuh: User ankur [1127408]: 1998 stern big-o-cookie-cutter Sep 18 16:46:15 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [1127408]: 1998 stern big-o-cookie-cutter] Sep 18 16:46:17 bastion LinuxCommandsWazuh: User ankur [814084]: 1999 stern big-o-cookie-cutter Sep 18 16:46:17 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [814084]: 1999 stern big-o-cookie-cutter] Sep 18 16:46:19 bastion LinuxCommandsWazuh: User ankur [1335473]: 1990 exit Sep 18 16:47:44 bastion LinuxCommandsWazuh: User ankur [1335473]: 1991 mongodb-1 Sep 18 16:47:48 bastion LinuxCommandsWazuh: User ankur [1335473]: 1992 ls Sep 18 16:47:49 bastion LinuxCommandsWazuh: User ankur [1335473]: 1992 ls Sep 18 16:49:27 bastion LinuxCommandsWazuh: User ankur [1338448]: 1990 exit Sep 18 16:49:42 bastion LinuxCommandsWazuh: User ankur [1338448]: 1991 rs.initiate({ Sep 18 16:49:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1338448]: 1991 rs.initiate({] Sep 18 16:49:43 bastion LinuxCommandsWazuh: User ankur [1338448]: 1992 { _id: 0, host: "mongodb0.example.net:27017" },; { _id: 1, host: "mongodb1.example.net:27017" },; { _id: 2, host: "mongodb2.example.net:27017" }; ] Sep 18 16:50:00 bastion LinuxCommandsWazuh: User ankur [1338448]: 1993 cat .bashrc Sep 18 16:51:27 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2016 mongodb-1-ssh Sep 18 16:51:38 bastion LinuxCommandsWazuh: User ankur [1338448]: 1994 mongodb-1 Sep 18 16:51:40 bastion LinuxCommandsWazuh: User ankur [1340820]: 1990 exit Sep 18 16:53:22 bastion LinuxCommandsWazuh: User ankur [1342418]: 1990 exit Sep 18 17:01:08 bastion LinuxCommandsWazuh: User ankur [1335473]: 1993 mongo Sep 18 17:01:09 bastion LinuxCommandsWazuh: User ankur [1340820]: 1991 mongodb-1 Sep 18 17:12:51 bastion LinuxCommandsWazuh: User ubuntu [1362189]: 1999 exit Sep 18 17:16:09 bastion LinuxCommandsWazuh: User abhijeet [1365964]: 1998 exit Sep 18 17:16:10 bastion LinuxCommandsWazuh: User abhijeet [1365964]: 1999 ls Sep 18 17:17:39 bastion LinuxCommandsWazuh: User abhijeet [1365964]: 2000 cool-server Sep 18 17:19:48 bastion LinuxCommandsWazuh: User abhijeet [1365964]: 2001 internal-server Sep 18 17:19:48 bastion LinuxCommandsWazuh: User abhijeet [1365964]: 2002 ls Sep 18 17:24:05 bastion LinuxCommandsWazuh: User abhijeet [1373535]: 1998 exit Sep 18 17:43:25 bastion LinuxCommandsWazuh: User abhijeet [1373535]: 1999 redis-secondary-ssh Sep 18 17:43:33 bastion LinuxCommandsWazuh: User abhijeet [1373535]: 2000 kubectl get nodes Sep 18 17:44:12 bastion LinuxCommandsWazuh: User abhijeet [1373535]: 2001 kubectl get nodes -o wide Sep 18 17:44:40 bastion LinuxCommandsWazuh: User abhijeet [1373535]: 2002 ssh ubuntu@10.190.0.28 Sep 18 17:46:19 bastion LinuxCommandsWazuh: User ashish [1396759]: 480 byobu Sep 18 17:46:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1396759]: 480 byobu] Sep 18 17:48:07 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2016 mongodb-1-ssh Sep 18 17:48:17 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2017 kubectl get deployment -n loki Sep 18 17:48:35 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2018 kubectl get deamonset -n loki Sep 18 17:48:41 bastion LinuxCommandsWazuh: User abhijeet [1302416]: 2019 kubectl get daemonset -n loki Sep 18 17:50:17 bastion LinuxCommandsWazuh: User ashish [3040696]: 471 mongo pixel_v1; Sep 18 17:50:18 bastion LinuxCommandsWazuh: User ashish [1396759]: 480 byobu Sep 18 17:50:20 bastion LinuxCommandsWazuh: User ubuntu [1404690]: 1999 dragonflydb-volatile-ssh Sep 18 17:50:22 bastion LinuxCommandsWazuh: User ubuntu [1404690]: 2000 ls Sep 18 17:50:22 bastion LinuxCommandsWazuh: User ashish [1396759]: 480 byobu Sep 18 17:50:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1396759]: 480 byobu] Sep 18 17:50:23 bastion LinuxCommandsWazuh: User ashish [1396759]: 481 ls Sep 18 17:50:24 bastion LinuxCommandsWazuh: User ashish [1396759]: 482 clear Sep 18 17:50:24 bastion LinuxCommandsWazuh: User ashish [1396759]: 483 ls Sep 18 17:50:26 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ashish [1396759]: 483 ls] Sep 18 17:50:39 bastion LinuxCommandsWazuh: User ubuntu [1404690]: 2001 gcloud auth activate-service-account --key-file=/home/service.json Sep 18 17:50:45 bastion LinuxCommandsWazuh: User ubuntu [1404690]: 2002 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Sep 18 17:51:03 bastion LinuxCommandsWazuh: User abhijeet [1203532]: 2010 cool-server Sep 18 17:52:06 bastion LinuxCommandsWazuh: User ankur [1406478]: 1990 exit Sep 18 17:59:34 bastion LinuxCommandsWazuh: User ashish [1414352]: 484 ls Sep 18 17:59:37 bastion LinuxCommandsWazuh: User ashish [1414352]: 485 bybobu Sep 18 17:59:37 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1414352]: 485 bybobu] Sep 18 17:59:42 bastion LinuxCommandsWazuh: User ashish [1414541]: 484 ls Sep 18 18:04:55 bastion LinuxCommandsWazuh: User ankur [1406478]: 1991 psql -U postgres Sep 18 18:10:01 bastion LinuxCommandsWazuh: User rihan [1435093]: 1377 mongo Sep 18 18:10:32 bastion LinuxCommandsWazuh: User rihan [1435093]: 1377 mongo Sep 18 18:11:49 bastion LinuxCommandsWazuh: User ashish [1414541]: 485 mongo pixel_v1; Sep 18 18:21:48 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 1998 exit Sep 18 18:22:56 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 1999 ls Sep 18 18:23:00 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2000 cat .bashrc Sep 18 18:23:15 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2001 curl http://10.94.16.3:543 Sep 18 18:23:16 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2002 curl http://10.94.16.3:5432 Sep 18 18:23:20 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2003 curl http://10.94.16.3:5432 -v Sep 18 18:23:41 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2004 psql Sep 18 18:23:54 bastion LinuxCommandsWazuh: User ankur [1451024]: 1990 exit Sep 18 18:23:55 bastion LinuxCommandsWazuh: User ankur [1451024]: 1991 cd Sep 18 18:23:58 bastion LinuxCommandsWazuh: User ankur [1451024]: 1992 cat .bashrc Sep 18 18:26:07 bastion LinuxCommandsWazuh: User ankur [1451024]: 1993 ls Sep 18 18:26:10 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2005 sudo su ankur Sep 18 18:26:23 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2006 kubectl get daemonset -n loki Sep 18 18:27:55 bastion LinuxCommandsWazuh: User abhijeet [1448982]: 2007 kubectl get daemonset prometheus-prometheus-node-exporter -n loki -o yaml Sep 18 18:45:09 bastion LinuxCommandsWazuh: User abhijeet [1454705]: 1998 exit Sep 18 18:46:56 bastion LinuxCommandsWazuh: User ankur [1455447]: 1990 exit Sep 18 18:47:51 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 1998 exit Sep 18 18:48:03 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 1999 kubectl get cm -n nitrox-production Sep 18 18:48:11 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2000 kubectl get cm -n loki Sep 18 18:49:14 bastion LinuxCommandsWazuh: User mohtashim [1457804]: 1038 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 18:50:46 bastion LinuxCommandsWazuh: User ankur [1342418]: 1991 clickhouse-ssh Sep 18 18:51:00 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2000 kubectl get cm -n loki Sep 18 18:54:26 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2001 kubectl edit cm prometheus-server -n loki Sep 18 18:54:47 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2002 kubectl get deployment -n loki Sep 18 18:55:17 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2003 kubectl rollout restart deployment prometheus-server -n loki Sep 18 18:55:53 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2004 kubectl rollout status deployment prometheus-server -n loki Sep 18 18:57:50 bastion LinuxCommandsWazuh: User ping-pong [1466804]: 57 exit Sep 18 18:59:50 bastion LinuxCommandsWazuh: User ping-pong [1466804]: 58 mongo Sep 18 19:01:54 bastion LinuxCommandsWazuh: User ankur [1470831]: 1990 exit Sep 18 19:02:26 bastion LinuxCommandsWazuh: User ankur [1471348]: 1990 exit Sep 18 19:10:58 bastion LinuxCommandsWazuh: User mohtashim [1332964]: 1038 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 19:11:00 bastion LinuxCommandsWazuh: User mohtashim [1332964]: 1039 clear Sep 18 19:16:42 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2005 kubectl get deployment -n loki Sep 18 19:16:54 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2006 kubectl get daemonset -n loki Sep 18 19:18:09 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2007 kubectl describe daemonset prometheus-prometheus-node-exporter -n loki Sep 18 19:18:24 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2008 kubectl get daemonset prometheus-prometheus-node-exporter -n loki -o wide Sep 18 19:18:30 bastion LinuxCommandsWazuh: User abhijeet [1456365]: 2009 kubectl get daemonset prometheus-prometheus-node-exporter -n loki -o yaml Sep 18 19:18:47 bastion LinuxCommandsWazuh: User mohtashim [1332964]: 1040 mongo pixel_v1 Sep 18 19:18:48 bastion LinuxCommandsWazuh: User mohtashim [1332964]: 1041 clear Sep 18 19:24:40 bastion LinuxCommandsWazuh: User mohtashim [1493845]: 1038 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 18 20:37:42 bastion LinuxCommandsWazuh: User ping-pong [1466804]: 58 mongo Sep 18 20:40:30 bastion LinuxCommandsWazuh: User mohtashim [1457804]: 1039 mongo pixel_v1 Sep 18 21:21:53 bastion LinuxCommandsWazuh: User ping-pong [1587213]: 58 mongo Sep 18 21:28:31 bastion LinuxCommandsWazuh: User ping-pong [1588016]: 58 mongo Sep 18 22:23:33 bastion LinuxCommandsWazuh: User ashish [1592540]: 486 byobu Sep 18 22:23:42 bastion LinuxCommandsWazuh: User ashish [1414541]: 485 mongo pixel_v1; Sep 18 22:23:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1414541]: 485 mongo pixel_v1;] Sep 18 22:39:59 bastion LinuxCommandsWazuh: User ashish [1609379]: 486 byobu Sep 18 22:57:30 bastion LinuxCommandsWazuh: User ashish [1628394]: 486 byobu Sep 18 22:57:50 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1628394]: 486 byobu] Sep 18 23:38:17 bastion LinuxCommandsWazuh: User abhijeet [1669853]: 1998 kubectl get daemonset prometheus-prometheus-node-exporter -n loki -o yaml Sep 18 23:38:25 bastion LinuxCommandsWazuh: User abhijeet [1669853]: 1999 ls Sep 18 23:38:27 bastion LinuxCommandsWazuh: User abhijeet [1669853]: 1999 ls Sep 18 23:48:02 bastion LinuxCommandsWazuh: User ashish [1679960]: 486 byobu Sep 18 23:48:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1679960]: 486 byobu]