Sep 22 08:00:20 bastion LinuxCommandsWazuh: User ankur [3259682]: 1990 exit Sep 22 08:01:27 bastion LinuxCommandsWazuh: User ankur [3259682]: 1991 byobu Sep 22 08:01:31 bastion LinuxCommandsWazuh: User ankur [3260961]: 1990 exit Sep 22 08:01:35 bastion LinuxCommandsWazuh: User ankur [3260961]: 1991 byobu Sep 22 08:03:53 bastion LinuxCommandsWazuh: User ankur [3261189]: 1990 exit Sep 22 08:04:05 bastion LinuxCommandsWazuh: User ankur [2078183]: 2058 k get pods | grep big Sep 22 08:04:16 bastion LinuxCommandsWazuh: User ankur [2078183]: 2059 k get pods -o wide | grep big Sep 22 08:06:22 bastion LinuxCommandsWazuh: User ankur [2078183]: 2060 k logs -f big-o-cookie-cutter-d65598bcc-4cr4k | grep "PxxO" Sep 22 11:29:53 bastion LinuxCommandsWazuh: User ankur [3289047]: 1990 byobu Sep 22 11:46:11 bastion LinuxCommandsWazuh: User ashish [3305949]: 494 mongo pixel_v1; Sep 22 11:56:12 bastion LinuxCommandsWazuh: User rihan [3325484]: 1378 byobu Sep 22 11:57:33 bastion LinuxCommandsWazuh: User rihan [3325484]: 1378 byobu Sep 22 13:03:21 bastion LinuxCommandsWazuh: User ubuntu [3423949]: 1999 mongo-ssh Sep 22 13:15:58 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 1998 kubectl get pods Sep 22 13:15:59 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 1999 ls Sep 22 13:18:15 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1047 psql -h 10.94.16.3 -U postgres -d vortex_v2 Sep 22 13:18:17 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1048 clear Sep 22 13:18:23 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1048 clear Sep 22 13:21:55 bastion LinuxCommandsWazuh: User ubuntu [3432805]: 1999 mongo-ssh Sep 22 13:21:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3432805]: 1999 mongo-ssh ] Sep 22 13:23:39 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 1998 kubectl get pods Sep 22 13:23:41 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 1999 ls Sep 22 13:23:52 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2000 #spc /tmp/db_exporter.tar i Sep 22 13:23:58 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2001 cat .bashrc Sep 22 13:24:43 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2002 scp -p 12222 /tmp/db_exporter.tar nitro@34.131.103.89:/tmp/ Sep 22 13:24:56 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2003 scp --help | port Sep 22 13:24:57 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2003 scp --help | port Sep 22 13:25:01 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2004 scp --help | grep port Sep 22 13:25:12 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2005 scp -P 12222 /tmp/db_exporter.tar nitro@34.131.103.89:/tmp/ Sep 22 13:26:22 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2006 scp -P 12222 /tmp/db_exporter.tar abhijeet@34.131.103.89:/tmp/ Sep 22 13:26:22 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1049 psql -U postgres Sep 22 13:26:23 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1049 psql -U postgres Sep 22 13:26:34 bastion LinuxCommandsWazuh: User abhijeet [3432999]: 2007 scp /tmp/db_exporter.tar abhijeet@34.131.103.89:/tmp/ Sep 22 13:31:21 bastion LinuxCommandsWazuh: User ubuntu [3432805]: 2000 mongo-ssh Sep 22 13:37:23 bastion LinuxCommandsWazuh: User ashish [3434744]: 495 byobu Sep 22 13:40:30 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 1998 exit Sep 22 13:40:47 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 1999 kubectl get cm -n loki Sep 22 13:41:48 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2000 kubectl edit cm prometheus-server -n loki Sep 22 13:42:02 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2001 kubectl get deployment -n loki Sep 22 13:58:22 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2002 kubectl rollout restart deployment prometheus-server -n loki Sep 22 13:58:38 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2000 internal-server Sep 22 13:58:43 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2001 kubectl get pods -n loki Sep 22 13:58:46 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2001 kubectl get pods -n loki Sep 22 13:59:01 bastion LinuxCommandsWazuh: message repeated 11 times: [ User abhijeet [3432450]: 2001 kubectl get pods -n loki] Sep 22 13:59:12 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2002 docker logs prometheus-server-5dbf76b6ff-vqkmd Sep 22 13:59:17 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2003 kubec logs prometheus-server-5dbf76b6ff-vqkmd Sep 22 13:59:20 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2004 kubectl get pods -n loki Sep 22 13:59:36 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2003 kubectl rollout status deployment prometheus-server -n loki Sep 22 14:00:27 bastion LinuxCommandsWazuh: User ashish [3449743]: 495 byobu Sep 22 14:02:04 bastion LinuxCommandsWazuh: User rihan [3325484]: 1379 mongo Sep 22 14:02:44 bastion LinuxCommandsWazuh: User ubuntu [3451985]: 1999 exit Sep 22 14:02:57 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2004 ls Sep 22 14:03:00 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2004 ls Sep 22 14:03:11 bastion LinuxCommandsWazuh: User abhijeet [3437982]: 2004 ls Sep 22 14:04:43 bastion LinuxCommandsWazuh: User abhijeet [3453945]: 1998 exit Sep 22 14:05:58 bastion LinuxCommandsWazuh: User abhijeet [3453945]: 1999 ls Sep 22 14:09:38 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2005 kubectl get pods -n lojki Sep 22 14:09:41 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2006 kubectl get pods -n loki Sep 22 14:09:53 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2007 kubectl get cm -n loki Sep 22 14:10:42 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2008 kubectl edit cm prometheus-server -n loki Sep 22 14:10:47 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2008 kubectl edit cm prometheus-server -n loki Sep 22 14:10:58 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2009 kubectl get deployment -n loki Sep 22 14:13:01 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2010 kubectl rollout restart prometheus-server -n loki Sep 22 14:13:09 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2011 kubectl rollout restart deployment prometheus-server -n loki Sep 22 14:14:14 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2012 kubectl rollout status deployment prometheus-server -n loki Sep 22 14:14:39 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2013 kubectl get pod -n loki Sep 22 14:23:43 bastion LinuxCommandsWazuh: User ankur [3472840]: 1990 byobu Sep 22 14:23:56 bastion LinuxCommandsWazuh: User ankur [3473174]: 1990 byobu Sep 22 14:24:51 bastion LinuxCommandsWazuh: User ankur [2078183]: 2061 clickhouse-ssh Sep 22 14:25:03 bastion LinuxCommandsWazuh: User ankur [2078183]: 2062 k get configmaps Sep 22 14:26:03 bastion LinuxCommandsWazuh: User ankur [2078183]: 2063 k edit configmaps house-of-click-config Sep 22 14:40:57 bastion LinuxCommandsWazuh: User ubuntu [3490555]: 1999 mongo-ssh Sep 22 14:41:34 bastion LinuxCommandsWazuh: User ubuntu [3490555]: 1999 mongo-ssh Sep 22 14:58:35 bastion LinuxCommandsWazuh: User shamailtayyab [3508271]: 1997 k get pods Sep 22 15:04:35 bastion LinuxCommandsWazuh: User abhijeet [3432450]: 2014 kubectl get pods | grep khar Sep 22 15:14:37 bastion LinuxCommandsWazuh: User mohtashim [3432563]: 1050 psql Sep 22 15:38:36 bastion LinuxCommandsWazuh: User ubuntu [3548922]: 1999 exit Sep 22 15:38:37 bastion LinuxCommandsWazuh: User ubuntu [3548922]: 2000 ls Sep 22 15:38:44 bastion LinuxCommandsWazuh: User anshika [3549068]: 178 exit Sep 22 15:38:45 bastion LinuxCommandsWazuh: User anshika [3549068]: 179 cd Sep 22 15:38:46 bastion LinuxCommandsWazuh: User anshika [3549068]: 180 ls Sep 22 15:38:47 bastion LinuxCommandsWazuh: User anshika [3549068]: 181 cd .ssh/ Sep 22 15:38:56 bastion LinuxCommandsWazuh: User anshika [3549068]: 182 sudo vi authorized_keys Sep 22 15:39:10 bastion LinuxCommandsWazuh: User anshika [3549068]: 183 vi authorized_keys Sep 22 15:39:11 bastion LinuxCommandsWazuh: User ubuntu [3548922]: 2001 sudo su anshika Sep 22 15:39:14 bastion LinuxCommandsWazuh: User ubuntu [3548922]: 2001 sudo su anshika Sep 22 15:43:29 bastion LinuxCommandsWazuh: User ankur [3553711]: 1990 byobu Sep 22 15:43:31 bastion LinuxCommandsWazuh: User ankur [3553711]: 1991 ls Sep 22 15:43:40 bastion LinuxCommandsWazuh: User ankur [3553711]: 1992 k get pods | grep house Sep 22 15:49:49 bastion LinuxCommandsWazuh: User ubuntu [3560408]: 1999 exit Sep 22 15:49:52 bastion LinuxCommandsWazuh: User ubuntu [3560408]: 2000 cool-server Sep 22 15:50:05 bastion LinuxCommandsWazuh: User ubuntu [3560408]: 2001 ai -server Sep 22 15:55:51 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 1999 ai-server Sep 22 15:55:59 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2000 cd .ssh/ Sep 22 15:56:00 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2001 ls Sep 22 15:56:02 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2002 cat id_rsa.pub Sep 22 15:56:10 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2002 cat id_rsa.pub Sep 22 15:57:13 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2002 cat id_rsa.pub Sep 22 15:57:20 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2002 cat id_rsa.pub Sep 22 16:04:27 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2003 ls Sep 22 16:04:27 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2004 cd Sep 22 16:04:31 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2005 ls Sep 22 16:05:07 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2006 \\ Sep 22 16:05:10 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2007 \\\ Sep 22 16:05:13 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2007 \\\ Sep 22 16:05:57 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2008 ls Sep 22 16:05:57 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2008 ls Sep 22 16:06:45 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2008 ls Sep 22 16:08:00 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2009 ai-server Sep 22 16:08:02 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2010 cool-server Sep 22 16:08:10 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2011 cd .ssh/ Sep 22 16:08:10 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2012 sl Sep 22 16:08:13 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2013 ls Sep 22 16:08:15 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2014 cat id_rsa.pub Sep 22 16:09:59 bastion LinuxCommandsWazuh: User ubuntu [3564253]: 1999 ai-server Sep 22 16:10:00 bastion LinuxCommandsWazuh: User ubuntu [3564253]: 2000 ;s Sep 22 16:10:01 bastion LinuxCommandsWazuh: User ubuntu [3564253]: 2001 ls Sep 22 16:10:14 bastion LinuxCommandsWazuh: User ubuntu [3564253]: 2002 cat .ssh/id_rsa.pub Sep 22 16:11:02 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2015 ai-server Sep 22 16:12:45 bastion LinuxCommandsWazuh: User anshika [3564499]: 184 exit Sep 22 16:16:39 bastion LinuxCommandsWazuh: User abhijeet [3565289]: 1998 internal-server Sep 22 16:23:14 bastion LinuxCommandsWazuh: User ubuntu [3563005]: 2016 cool-server Sep 22 16:40:32 bastion LinuxCommandsWazuh: User ankur [3567433]: 1990 byobu Sep 22 16:40:36 bastion LinuxCommandsWazuh: User ankur [3553711]: 1992 k get pods | grep house Sep 22 16:44:37 bastion LinuxCommandsWazuh: User ankur [3553711]: 1992 k get pods | grep house Sep 22 16:44:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3553711]: 1992 k get pods | grep house] Sep 22 16:44:40 bastion LinuxCommandsWazuh: User ankur [3553711]: 1993 ls Sep 22 16:44:46 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3553711]: 1993 ls] Sep 22 16:46:24 bastion LinuxCommandsWazuh: User ankur [3553711]: 1994 k get pods | grep house Sep 22 16:46:30 bastion LinuxCommandsWazuh: User ankur [3553711]: 1995 k get pods -o wide | grep house Sep 22 16:56:53 bastion LinuxCommandsWazuh: User ankur [3473174]: 1991 kafka-ssh Sep 22 16:57:04 bastion LinuxCommandsWazuh: User ubuntu [3584412]: 1999 ai-server Sep 22 16:57:08 bastion LinuxCommandsWazuh: User ankur [3553711]: 1995 k get pods -o wide | grep house Sep 22 16:59:11 bastion LinuxCommandsWazuh: User ankur [3553711]: 1995 k get pods -o wide | grep house Sep 22 16:59:16 bastion LinuxCommandsWazuh: User ankur [2755999]: 1992 k logs -f cookie-cutter-queues-767cf4df7f-vpz27 Sep 22 16:59:19 bastion LinuxCommandsWazuh: User ankur [2755999]: 1992 k logs -f cookie-cutter-queues-767cf4df7f-vpz27 Sep 22 17:00:38 bastion LinuxCommandsWazuh: User ankur [3567433]: 1990 byobu Sep 22 17:05:59 bastion LinuxCommandsWazuh: User ankur [3588758]: 1990 exit Sep 22 17:06:12 bastion LinuxCommandsWazuh: User ankur [1941955]: 1991 clickhouse-ssh Sep 22 17:06:18 bastion LinuxCommandsWazuh: User ankur [1471348]: 1991 clickhouse-ssh Sep 22 17:06:28 bastion LinuxCommandsWazuh: User ankur [1784738]: 2022 ls Sep 22 17:07:06 bastion LinuxCommandsWazuh: User ankur [1784738]: 2023 k logs -f big-o-cookie-cutter-d65598bcc-7bxvj Sep 22 17:07:32 bastion LinuxCommandsWazuh: User ankur [1470831]: 1991 mongo Sep 22 17:07:35 bastion LinuxCommandsWazuh: User ankur [1342418]: 1992 psql -U postgres Sep 22 17:07:35 bastion LinuxCommandsWazuh: User ankur [3588758]: 1991 byobu Sep 22 17:07:43 bastion LinuxCommandsWazuh: User ankur [3590346]: 1990 exit Sep 22 17:07:45 bastion LinuxCommandsWazuh: User ankur [3590402]: 1990 exit Sep 22 18:38:27 bastion LinuxCommandsWazuh: User ubuntu [3682307]: 1999 cat .ssh/id_rsa.pub Sep 22 18:56:50 bastion LinuxCommandsWazuh: User ashish [3700880]: 495 byobu Sep 22 18:56:57 bastion LinuxCommandsWazuh: User ashish [2532287]: 496 mongo pixel_v1; Sep 22 18:57:01 bastion LinuxCommandsWazuh: User ashish [2532287]: 497 kubectl get pods Sep 22 19:01:01 bastion LinuxCommandsWazuh: User mohtashim [3709015]: 1051 exit Sep 22 19:01:05 bastion LinuxCommandsWazuh: User mohtashim [3709015]: 1052 k get hpa Sep 22 19:26:45 bastion LinuxCommandsWazuh: User ankur [3590402]: 1991 clickhouse-ssh Sep 22 19:26:46 bastion LinuxCommandsWazuh: User ankur [3590346]: 1991 byobu Sep 22 19:29:37 bastion LinuxCommandsWazuh: User ubuntu [3682307]: 2000 cool-server Sep 22 19:29:37 bastion LinuxCommandsWazuh: User ubuntu [3584412]: 2000 cool-server Sep 22 19:29:43 bastion LinuxCommandsWazuh: User abhijeet [3761471]: 1998 cool-server Sep 22 19:30:17 bastion LinuxCommandsWazuh: User ubuntu [3762111]: 1999 cat .ssh/id_rsa.pub Sep 22 19:30:23 bastion LinuxCommandsWazuh: User ubuntu [3762111]: 2000 cool-server Sep 22 19:30:47 bastion LinuxCommandsWazuh: User abhijeet [3761471]: 1998 cool-server Sep 22 19:33:25 bastion LinuxCommandsWazuh: User abhijeet [3761471]: 1998 cool-server Sep 22 19:45:13 bastion LinuxCommandsWazuh: User ashish [2532287]: 497 kubectl get pods Sep 22 19:45:15 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ashish [2532287]: 497 kubectl get pods] Sep 22 19:45:15 bastion LinuxCommandsWazuh: User ashish [3700880]: 495 byobu Sep 22 23:09:20 bastion LinuxCommandsWazuh: User ubuntu [3794433]: 1999 cool-server Sep 22 23:09:25 bastion LinuxCommandsWazuh: User ubuntu [3794433]: 2000 mongo