Oct 1 08:30:27 bastion LinuxCommandsWazuh: User ankur [3393074]: 1995 exit Oct 1 08:31:15 bastion LinuxCommandsWazuh: User ankur [3393971]: 1995 exit Oct 1 08:35:00 bastion LinuxCommandsWazuh: User ankur [3393074]: 1996 byobu Oct 1 11:41:14 bastion LinuxCommandsWazuh: User abhijeet [3412243]: 1998 internal-server Oct 1 12:06:20 bastion LinuxCommandsWazuh: User abhijeet [3414787]: 1998 internal-server Oct 1 12:35:26 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 1998 internal-server Oct 1 12:35:41 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 1999 kubectl get deployment -n nitrox-production Oct 1 12:37:41 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 2000 kubectl get hpa -n nitrox-production Oct 1 12:50:53 bastion LinuxCommandsWazuh: User ubuntu [3419026]: 1999 exit Oct 1 13:02:03 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 2001 kubectl get deployment -n nitrox-production -o wide Oct 1 13:02:23 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 2002 kubectl get pods -n nitrox-production -o wide Oct 1 13:03:02 bastion LinuxCommandsWazuh: User abhijeet [3417109]: 2003 kubectl get deployments -o custom-columns='NAMESPACE:.metadata.namespace,DEPLOYMENT:.metadata.name,NODE_SELECTOR:.spec.template.spec.nodeSelector' Oct 1 13:08:28 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 583 stern cookie-cutter | grep "8266902970" Oct 1 13:08:29 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 584 clear Oct 1 13:12:34 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 585 stern cookie-cutter | grep "8266902970" Oct 1 13:12:53 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 586 clear Oct 1 13:21:30 bastion LinuxCommandsWazuh: User abhijeet [3421681]: 1998 internal-server Oct 1 13:21:30 bastion LinuxCommandsWazuh: User abhijeet [3421681]: 1999 ls Oct 1 13:24:55 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 587 stern cookie-cutter | grep ":SSO" Oct 1 13:24:55 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3420624]: 587 stern cookie-cutter | grep ":SSO"] Oct 1 13:26:35 bastion LinuxCommandsWazuh: User abhijeet [3421681]: 2000 internal-server Oct 1 13:26:47 bastion LinuxCommandsWazuh: User ubuntu [3422520]: 1999 mongo-ssh Oct 1 13:27:32 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 588 stern cookie-cutter | grep "merged_customer" Oct 1 13:27:33 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3420624]: 588 stern cookie-cutter | grep "merged_customer"] Oct 1 13:27:33 bastion LinuxCommandsWazuh: User ubuntu [3422520]: 1999 mongo-ssh Oct 1 13:27:37 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 589 stern cookie-cutter | grep "curl 'https://t.makehook.ws/jsv1/shopify-user-data/db46fc4f-595b-42a0-84fe-d447a3e9b444/468fb643-8ae4-4fca-bae0-31f50cd9b3f9/biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad' \#012 -H 'accept: */*' \#012 -H 'accept-language: en-US,en;q=0.9' \#012 -b 'biscuit-id=biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad' \#012 -H 'priority: u=1, i' \#012 -H 'referer: https://t.makehook.ws/popup/db46fc4f-595b-42a0-84fe-d447a3e9b444?_yt=e8a9ffba-1b4d-4cea-aea9-82a64bc501a3&_in=undefined&_iw=2494&cdc=null&nitrossodebug=1&_o=db46fc4f-595b-42a0-84fe-d447a3e9b444&_p=biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad&_n=468fb643-8ae4-4fca-bae0-31f50cd9b3f9' \#012 -H 'sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="138", "Google Chrome";v="138"' \ Oct 1 13:27:39 bastion LinuxCommandsWazuh: message repeated 4 times: [ User mohtashim [3420624]: 589 stern cookie-cutter | grep "curl 'https://t.makehook.ws/jsv1/shopify-user-data/db46fc4f-595b-42a0-84fe-d447a3e9b444/468fb643-8ae4-4fca-bae0-31f50cd9b3f9/biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad' \#012 -H 'accept: */*' \#012 -H 'accept-language: en-US,en;q=0.9' \#012 -b 'biscuit-id=biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad' \#012 -H 'priority: u=1, i' \#012 -H 'referer: https://t.makehook.ws/popup/db46fc4f-595b-42a0-84fe-d447a3e9b444?_yt=e8a9ffba-1b4d-4cea-aea9-82a64bc501a3&_in=undefined&_iw=2494&cdc=null&nitrossodebug=1&_o=db46fc4f-595b-42a0-84fe-d447a3e9b444&_p=biscuit_79b276c9-4faf-4aca-a8bc-deeda43fa0ad&_n=468fb643-8ae4-4fca-bae0-31f50cd9b3f9' \#012 -H 'sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="138", "Google Chrome";v="138"' \] Oct 1 13:27:51 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 590 clear Oct 1 13:27:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3420624]: 590 clear] Oct 1 13:29:50 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 591 stern cookie-cutter | grep "DEBUG::MERGE>6>merged_customer:" Oct 1 13:29:50 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 591 stern cookie-cutter | grep "DEBUG::MERGE>6>merged_customer:" Oct 1 13:30:32 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 592 stern cookie-cutter | grep "8266902970" Oct 1 13:30:33 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3420624]: 592 stern cookie-cutter | grep "8266902970"] Oct 1 13:30:34 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 593 clear Oct 1 14:16:10 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 1998 kubectl get deployments -o custom-columns='NAMESPACE:.metadata.namespace,DEPLOYMENT:.metadata.name,NODE_SELECTOR:.spec.template.spec.nodeSelector' Oct 1 14:16:22 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 1999 kubectl get nodes --show-labels -n nitrox-production Oct 1 14:16:30 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2000 kubectl get nodes --show-labels -n nitrox-production | grep miss Oct 1 14:16:33 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2001 kubectl get nodes --show-labels -n nitrox-production | grep mis Oct 1 14:17:03 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2001 kubectl get nodes --show-labels -n nitrox-production | grep mis Oct 1 14:18:26 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2002 kubectl get nodes --show-labels -n nitrox-production | grep colla Oct 1 14:19:41 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 594 stern cookie-cutter | grep "8266902970" Oct 1 14:19:42 bastion LinuxCommandsWazuh: message repeated 4 times: [ User mohtashim [3420624]: 594 stern cookie-cutter | grep "8266902970"] Oct 1 14:19:45 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 595 k get pods Oct 1 14:20:01 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 596 k logs -f big-o-cookie-cutter-d65598bcc-wtffq Oct 1 14:20:20 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 597 clear Oct 1 14:20:39 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 598 exity Oct 1 14:20:39 bastion LinuxCommandsWazuh: User mohtashim [3420624]: 598 exity Oct 1 14:27:34 bastion LinuxCommandsWazuh: User mohtashim [3427628]: 605 exit Oct 1 14:29:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3427628]: 605 exit] Oct 1 14:30:31 bastion LinuxCommandsWazuh: User mohtashim [3427628]: 606 clickhouse-server Oct 1 14:30:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3427628]: 606 clickhouse-server ] Oct 1 14:30:34 bastion LinuxCommandsWazuh: User mohtashim [3427628]: 607 clear4 Oct 1 14:30:36 bastion LinuxCommandsWazuh: User mohtashim [3427628]: 608 clear Oct 1 14:31:38 bastion LinuxCommandsWazuh: User ankur [3427820]: 1995 exit Oct 1 14:31:50 bastion LinuxCommandsWazuh: User ankur [3427949]: 1995 exit Oct 1 14:32:32 bastion LinuxCommandsWazuh: User mohtashim [3428783]: 609 clickhouse-ssh Oct 1 14:32:35 bastion LinuxCommandsWazuh: User mohtashim [3428783]: 610 clear Oct 1 14:43:04 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2003 kubectl get pdb Oct 1 14:43:20 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2004 kubectl get pdb -n nitrox-production Oct 1 14:44:43 bastion LinuxCommandsWazuh: User ankur [3440743]: 1995 exit Oct 1 14:49:55 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2005 kubectl get hpa -n nitrox-production Oct 1 14:51:54 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2006 kubectl get hpa urlbird -o yaml Oct 1 14:57:58 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2007 internal-server Oct 1 14:58:14 bastion LinuxCommandsWazuh: User abhijeet [3426538]: 2008 kubectl get hpa | grep url Oct 1 15:22:40 bastion LinuxCommandsWazuh: User ankur [3427820]: 1996 byobu Oct 1 15:41:17 bastion LinuxCommandsWazuh: User mohtashim [3428783]: 611 clickhouse-ssh Oct 1 15:41:19 bastion LinuxCommandsWazuh: User mohtashim [3428783]: 612 clear Oct 1 15:41:53 bastion LinuxCommandsWazuh: User mohtashim [3428783]: 613 mongo pixel_v1 Oct 1 15:52:19 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 1998 kubectl get hpa | grep url Oct 1 15:52:38 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 1999 kubectl get pods -o wide | grep url Oct 1 15:59:39 bastion LinuxCommandsWazuh: User ankur [3482419]: 1995 exit Oct 1 16:00:29 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 1999 kubectl get pods -o wide | grep url Oct 1 16:03:20 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 1999 kubectl get pods -o wide | grep url Oct 1 16:04:17 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2000 kubectl get pdb urlbird-pdb -o yaml Oct 1 16:04:50 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2001 kubectl describe pdb urlbird-pdb -o yaml Oct 1 16:04:54 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2002 kubectl describe pdb urlbird-pdb Oct 1 16:05:15 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2003 kubectl get hpa | grep url Oct 1 16:05:23 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2004 kubectl get pods -o wide | grep url Oct 1 16:05:43 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2005 kubectl get hpa Oct 1 16:08:09 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2006 kubectl get hpa urlbird -o yaml Oct 1 16:08:19 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2007 kubectl get hpa urlbird -o yaml | grep name Oct 1 16:08:34 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2008 kubectl get hpa -a A Oct 1 16:08:37 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2009 kubectl get hpa -a Oct 1 16:08:41 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2010 kubectl get hpa -all 0a Oct 1 16:08:46 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2011 kubectl get hpa -all A Oct 1 16:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2012 kubectl get hpa -n A Oct 1 16:09:00 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2013 kubectl get hpa -n default Oct 1 16:09:28 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2014 kubectl delete hpa namespace: nitrox-production Oct 1 16:09:49 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2015 kubectl delete hpa urlbird-jobs-spot-ondemand -n default Oct 1 16:09:53 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2016 kubectl get hpa -n default Oct 1 16:09:59 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2017 kubectl delete hpa urlbird-spot-ondemand -n default Oct 1 16:14:11 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2018 kubectl get hpa Oct 1 16:14:22 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2019 kubectl get pod | grep url Oct 1 16:14:57 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2020 kubectl get service Oct 1 16:15:17 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2021 kubectl get service urlbird -o yaml Oct 1 16:18:09 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2022 kubectl get pods -o wide | grep url Oct 1 16:18:21 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2023 kubectl top pods -o wide | grep url Oct 1 16:18:27 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2024 kubectl top pods | grep url Oct 1 16:19:32 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2024 kubectl top pods | grep url Oct 1 16:34:51 bastion LinuxCommandsWazuh: User ankur [3506917]: 1995 byobu Oct 1 16:34:55 bastion LinuxCommandsWazuh: User ankur [3507036]: 1995 byobu Oct 1 16:35:48 bastion LinuxCommandsWazuh: User rihan [3507997]: 1387 byobu Oct 1 16:35:50 bastion LinuxCommandsWazuh: User rihan [3507997]: 1388 byub Oct 1 16:35:56 bastion LinuxCommandsWazuh: User rihan [3247862]: 1388 psql -d tasdeeq -U postgres Oct 1 16:42:10 bastion LinuxCommandsWazuh: User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-" Oct 1 16:42:10 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-"] Oct 1 16:42:11 bastion LinuxCommandsWazuh: User ankur [3506917]: 1995 byobu Oct 1 16:49:28 bastion LinuxCommandsWazuh: User ankur [3528115]: 1995 exit Oct 1 16:49:33 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2025 ls Oct 1 16:49:37 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2026 kubectl get service Oct 1 16:49:52 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2027 kubectl describe service urlbird Oct 1 16:50:12 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2028 kubectl get service urlbird -o yaml Oct 1 16:54:38 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2029 kubectl get pods | grep spotr Oct 1 16:54:40 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2030 kubectl get pods | grep spot Oct 1 16:55:43 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2031 kubectl top pods | grep url Oct 1 16:55:50 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2031 kubectl top pods | grep url Oct 1 16:56:20 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2032 kubectl logs urlbird-spot-ondemand-6cdcfbd8f8-6dsh9 -f Oct 1 16:56:37 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2033 kubectl get pod | grep url Oct 1 16:56:43 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2034 kubectl get pod -o wide | grep url Oct 1 16:58:26 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2034 kubectl get pod -o wide | grep url Oct 1 16:58:44 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2035 kubectl get labels node Oct 1 16:58:50 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2036 kubectl get node lable Oct 1 17:00:55 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2037 kubectl get nodes Oct 1 17:01:31 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2038 kubectl get pods | grep url Oct 1 17:01:40 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2038 kubectl get pods | grep url Oct 1 17:01:46 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2039 kubectl get pods -o wide| grep url Oct 1 17:04:33 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2039 kubectl get pods -o wide| grep url Oct 1 17:04:50 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2040 kubectl get node --help Oct 1 17:05:09 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2041 kubectl get node -l Oct 1 17:05:24 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2042 kubectl get pods | grep url Oct 1 17:05:33 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2043 kubectl get pods -o wide \| grep url Oct 1 17:05:37 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2044 kubectl get pods -o wide | grep url Oct 1 17:07:11 bastion LinuxCommandsWazuh: User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-" Oct 1 17:07:12 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-"] Oct 1 17:07:27 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2045 kubectl get deployment -n nitrox-porduction Oct 1 17:07:32 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2045 kubectl get deployment -n nitrox-porduction Oct 1 17:07:40 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2046 kubectl get deployment -n nitrox-production Oct 1 17:08:01 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2047 kubectl get node Oct 1 17:08:17 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2048 kubectl get pods | grep url Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2049 urlbird-59dfdd5497-7wtvh 1/1 Running 0 4m15s 10.84.29.60 gke-nitrox-production-collab-services-187eb03f-jugl 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2050 urlbird-59dfdd5497-89bsc 1/1 Running 0 3m33s 10.84.4.49 gke-nitrox-production-collab-services-187eb03f-xclr 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2051 urlbird-59dfdd5497-bvwhs 1/1 Running 0 3m50s 10.84.10.42 gke-nitrox-production-collab-services-187eb03f-ipfe 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2052 urlbird-59dfdd5497-j5w8p 1/1 Running 0 3m52s 10.84.25.25 gke-nitrox-production-collab-services-187eb03f-qdyo 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2053 urlbird-59dfdd5497-jxdqw 1/1 Running 0 4m15s 10.84.8.39 gke-nitrox-production-collab-services-187eb03f-d2y6 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2054 urlbird-59dfdd5497-kldv6 1/1 Running 0 3m20s 10.84.4.50 gke-nitrox-production-collab-services-187eb03f-xclr 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2055 urlbird-59dfdd5497-kvjvq 1/1 Running 0 93s 10.84.25.29 gke-nitrox-production-collab-services-187eb03f-qdyo 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2056 urlbird-59dfdd5497-qq56t 1/1 Running 0 4m4s 10.84.25.24 gke-nitrox-production-collab-services-187eb03f-qdyo 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2057 urlbird-59dfdd5497-rwghp 1/1 Running 0 4m15s 10.84.10.40 gke-nitrox-production-collab-services-187eb03f-ipfe 1/1 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2058 urlbird-jobs-7658f69f47-45j7m 1/1 Running 0 2m35s 10.84.8.42 gke-nitrox-production-collab-services-187eb03f-d2y6 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2059 urlbird-jobs-7658f69f47-6j58r 1/1 Running 0 4m15s 10.84.4.48 gke-nitrox-production-collab-services-187eb03f-xclr Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2060 urlbird-jobs-7658f69f47-bnlqt 1/1 Running 0 4m15s 10.84.10.41 gke-nitrox-production-collab-services-187eb03f-ipfe Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2061 urlbird-jobs-7658f69f47-ghhqm 1/1 Running 0 4m15s 10.84.29.61 gke-nitrox-production-collab-services-187eb03f-jugl Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2062 urlbird-jobs-7658f69f47-hhqxx 1/1 Running 0 2m35s 10.84.4.51 gke-nitrox-production-collab-services-187eb03f-xclr Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2063 urlbird-jobs-7658f69f47-hlpp4 1/1 Running 0 4m2s 10.84.25.27 gke-nitrox-production-collab-services-187eb03f-qdyo Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2064 urlbird-jobs-7658f69f47-kgcw8 1/1 Running 0 2m35s 10.84.10.43 gke-nitrox-production-collab-services-187eb03f-ipfe Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2065 urlbird-jobs-7658f69f47-lnpmp 1/1 Running 0 2m35s 10.84.3.27 gke-nitrox-production-collab-services-187eb03f-vhve Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2066 urlbird-jobs-7658f69f47-ltvzm 1/1 Running 0 2m35s 10.84.29.62 gke-nitrox-production-collab-services-187eb03f-jugl Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2067 urlbird-jobs-7658f69f47-sjhqc 1/1 Running 0 2m35s 10.84.25.28 gke-nitrox-production-collab-services-187eb03f-qdyo Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2068 urlbird-jobs-7658f69f47-x7km8 1/1 Running 0 4m12s 10.84.8.41 gke-nitrox-production-collab-services-187eb03f-d2y6 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2069 urlbird-jobs-7658f69f47-z269d 1/1 Running 0 2m35s 10.84.3.28 gke-nitrox-production-collab-services-187eb03f-vhve Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2070 urlbird-jobs-spot-ondemand-6d677f5754-25njx 1/1 Running 0 106s 10.84.29.63 gke-nitrox-production-collab-services-187eb03f-jugl Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2071 urlbird-jobs-spot-ondemand-6d677f5754-44kv7 1/1 Running 0 106s 10.84.8.43 gke-nitrox-production-collab-services-187eb03f-d2y6 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2072 urlbird-jobs-spot-ondemand-6d677f5754-55btn 1/1 Running 0 4m13s 10.84.24.161 gke-nitrox-productio-cookie-cutter-qu-164056e1-8hkz Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2073 urlbird-jobs-spot-ondemand-6d677f5754-7dhfh 1/1 Running 0 106s 10.84.3.29 gke-nitrox-production-collab-services-187eb03f-vhve Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2074 urlbird-jobs-spot-ondemand-6d677f5754-bnbjv 1/1 Running 0 106s 10.84.27.11 gke-nitrox-production-nitro-services-fafd95c3-twmz Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2075 urlbird-jobs-spot-ondemand-6d677f5754-dv8xd 1/1 Running 0 106s 10.84.16.19 gke-nitrox-productio-miscellaneous-sp-ffb107e5-dqtj Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2076 urlbird-jobs-spot-ondemand-6d677f5754-gmg9c 1/1 Running 0 4m15s 10.84.26.107 gke-nitrox-production-cookie-cutter-49a2022e-w9wk Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2077 urlbird-jobs-spot-ondemand-6d677f5754-kjv9j 1/1 Running 0 4m11s 10.84.36.30 gke-nitrox-production-cookie-cutter-49a2022e-v7pn Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2078 urlbird-jobs-spot-ondemand-6d677f5754-qd4hp 1/1 Running 0 4m15s 10.84.0.60 gke-nitrox-productio-cookie-cutter-qu-164056e1-84w4 Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2079 urlbird-jobs-spot-ondemand-6d677f5754-rdnjj 1/1 Running 0 106s 10.84.16.20 gke-nitrox-productio-miscellaneous-sp-ffb107e5-dqtj Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2080 urlbird-jobs-spot-ondemand-6d677f5754-sm5pl 1/1 Running 0 4m15s 10.84.23.175 gke-nitrox-productio-cookie-cutter-qu-164056e1-frms Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2081 urlbird-jobs-spot-ondemand-6d677f5754-t7m6h 1/1 Running 0 106s 10.84.26.109 gke-nitrox-production-cookie-cutter-49a2022e-w9wk Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2082 urlbird-spot-ondemand-776769f77d-5slbz 1/1 Running 0 4m15s 10.84.16.16 gke-nitrox-productio-miscellaneous-sp-ffb107e5-dqtj Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2083 urlbird-spot-ondemand-776769f77d-7vdwc 1/1 Running 0 4m13s 10.84.23.176 gke-nitrox-productio-cookie-cutter-qu-164056e1-frms Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2084 urlbird-spot-ondemand-776769f77d-dqfpp 1/1 Running 0 2m17s 10.84.16.18 gke-nitrox-productio-miscellaneous-sp-ffb107e5-dqtj Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2085 urlbird-spot-ondemand-776769f77d-lkc7s 1/1 Running 0 4m15s 10.84.26.108 gke-nitrox-production-cookie-cutter-49a2022e-w9wk Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2086 urlbird-spot-ondemand-776769f77d-ssx7t 1/1 Running 0 2m17s 10.84.16.17 gke-nitrox-productio-miscellaneous-sp-ffb107e5-dqtj Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2087 urlbird-spot-ondemand-776769f77d-v5rsb 1/1 Running 0 4m15s 10.84.24.160 gke-nitrox-productio-cookie-cutter-qu-164056e1-8hkz Oct 1 17:08:51 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2088 urlbird-spot-ondemand-776769f77d-zlg8d 1/1 Running 0 4m13s 10.84.0.61 gke-nitrox-productio-cookie-cutter-qu-164056e1-84w4 Oct 1 17:08:56 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2089 kubectl get nodes --show-labels Oct 1 17:09:19 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2090 kubectl get pods -o wide | grep url Oct 1 17:09:50 bastion LinuxCommandsWazuh: User rihan [3247862]: 1389 make cookie-bash Oct 1 17:09:50 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2091 kubectl get deployment | grep urlbird Oct 1 17:09:51 bastion LinuxCommandsWazuh: User rihan [3507997]: 1389 byobu Oct 1 17:10:02 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2092 kubectl get nodes --show-labels | grep mis Oct 1 17:14:16 bastion LinuxCommandsWazuh: User mohtashim [3565830]: 613 mongo pixel_v1 Oct 1 17:14:18 bastion LinuxCommandsWazuh: User mohtashim [3565830]: 614 clear Oct 1 17:16:08 bastion LinuxCommandsWazuh: User mohtashim [3566610]: 613 mongo pixel_v1 Oct 1 17:21:58 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:22:24 bastion LinuxCommandsWazuh: User mohtashim [3566610]: 613 mongo pixel_v1 Oct 1 17:22:26 bastion LinuxCommandsWazuh: User mohtashim [3566610]: 614 clear Oct 1 17:22:32 bastion LinuxCommandsWazuh: User rihan [3566858]: 1389 byobu Oct 1 17:25:36 bastion LinuxCommandsWazuh: User ashish [3567011]: 510 byobu Oct 1 17:26:21 bastion LinuxCommandsWazuh: User ashish [1650910]: 511 mongo pixel_v1; Oct 1 17:26:21 bastion LinuxCommandsWazuh: User ashish [3567011]: 510 byobu Oct 1 17:28:06 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:28:21 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:35:41 bastion LinuxCommandsWazuh: User rihan [3566858]: 1390 mongo Oct 1 17:36:46 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:37:00 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:37:12 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:37:48 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:38:39 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2093 kubectl get pods -o wide | grep url Oct 1 17:39:02 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2094 kubectl get service -n nitrox-production Oct 1 17:39:18 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2095 kubectl get deployment Oct 1 17:39:27 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2096 kubectl get hpa Oct 1 17:39:45 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2097 kubectl edit service urlbird -n nitorx-production Oct 1 17:39:55 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2098 kubectl edit service urlbird -n nitrox-prodcution Oct 1 17:40:19 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2099 kubectl edit service urlbird -n nitrox-production Oct 1 17:40:26 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2100 kubectl get pods -o wide | grep url Oct 1 17:40:29 bastion LinuxCommandsWazuh: User ankur [3569646]: 1995 byobu Oct 1 17:40:32 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2100 kubectl get pods -o wide | grep url Oct 1 17:40:57 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2101 kubectl logs urlbird-spot-ondemand-5989c9c796-fr2gf -f Oct 1 17:41:00 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2102 kubectl get pods -o wide | grep url Oct 1 17:41:13 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2103 kubectl logs urlbird-7fc989c499-m25h8 Oct 1 17:41:20 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2104 kubectl logs urlbird-7fc989c499-m25h8 -f Oct 1 17:41:24 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2105 kubectl get pods -o wide | grep url Oct 1 17:41:49 bastion LinuxCommandsWazuh: User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-" Oct 1 17:41:49 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3507036]: 1996 stern cookie-cutter | grep "FacebookExporter:-"] Oct 1 17:41:51 bastion LinuxCommandsWazuh: User ankur [3569646]: 1995 byobu Oct 1 17:41:56 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2105 kubectl get pods -o wide | grep url Oct 1 17:52:45 bastion LinuxCommandsWazuh: User abhijeet [3574296]: 1998 kubectl get hpa | grep url Oct 1 17:53:02 bastion LinuxCommandsWazuh: User abhijeet [3574296]: 1999 watch kubectl get node | grep mis Oct 1 18:01:28 bastion LinuxCommandsWazuh: User abhijeet [3481624]: 2106 watch "kubectl get pods -o wide | grep url" Oct 1 18:01:31 bastion LinuxCommandsWazuh: User abhijeet [3574296]: 2000 internal-server Oct 1 18:15:40 bastion LinuxCommandsWazuh: User ashish [3579935]: 511 mongo pixel_v1; Oct 1 18:15:42 bastion LinuxCommandsWazuh: User ashish [3579992]: 511 mongo pixel_v1; Oct 1 18:15:46 bastion LinuxCommandsWazuh: User ashish [3579992]: 512 mongosh Oct 1 18:15:50 bastion LinuxCommandsWazuh: User ashish [3579992]: 513 pixel_v1 Oct 1 18:32:01 bastion LinuxCommandsWazuh: User rihan [3597172]: 1390 mongo Oct 1 18:32:13 bastion LinuxCommandsWazuh: User rihan [3597172]: 1391 kubectl get pods | grep cookie Oct 1 18:33:13 bastion LinuxCommandsWazuh: User rihan [3597172]: 1391 kubectl get pods | grep cookie Oct 1 18:51:16 bastion LinuxCommandsWazuh: User ashish [3579992]: 514 mongo pixel_v1; Oct 1 18:51:16 bastion LinuxCommandsWazuh: User ashish [3579935]: 512 byobu Oct 1 18:51:17 bastion LinuxCommandsWazuh: User ashish [3579935]: 512 byobu