Oct 3 09:08:50 bastion LinuxCommandsWazuh: User ankur [3840918]: 1995 byobu Oct 3 09:09:24 bastion LinuxCommandsWazuh: User ankur [3840918]: 1995 byobu Oct 3 09:09:26 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3840918]: 1995 byobu] Oct 3 09:12:30 bastion LinuxCommandsWazuh: User ankur [3840918]: 1995 byobu Oct 3 11:44:04 bastion LinuxCommandsWazuh: User ankur [3854814]: 1995 exit Oct 3 12:02:47 bastion LinuxCommandsWazuh: User rihan [3873873]: 1391 kubectl get pods | grep cookie Oct 3 12:05:56 bastion LinuxCommandsWazuh: User ping-pong [3877530]: 58 mongo Oct 3 12:06:08 bastion LinuxCommandsWazuh: User rihan [3873873]: 1392 psql Oct 3 12:06:31 bastion LinuxCommandsWazuh: User rihan [3873873]: 1393 psql -U dbuser id nitrox_v2 Oct 3 12:06:43 bastion LinuxCommandsWazuh: User ping-pong [3877530]: 59 psql Oct 3 12:07:05 bastion LinuxCommandsWazuh: User mohtashim [3878770]: 617 clickhouse-ssh Oct 3 12:07:06 bastion LinuxCommandsWazuh: User mohtashim [3878770]: 618 clear Oct 3 12:07:11 bastion LinuxCommandsWazuh: User ping-pong [3877530]: 60 psql -U dbuser -d nitrox_v2 Oct 3 12:10:20 bastion LinuxCommandsWazuh: User rihan [3873873]: 1394 psql -U dbuser -d nitrox_v2 Oct 3 12:23:28 bastion LinuxCommandsWazuh: User aman [3894870]: 255 exit Oct 3 12:23:28 bastion LinuxCommandsWazuh: User aman [3894870]: 256 clear Oct 3 12:23:33 bastion LinuxCommandsWazuh: User aman [3894870]: 257 psql -U postgres Oct 3 12:23:35 bastion LinuxCommandsWazuh: User aman [3894870]: 258 clear Oct 3 12:23:55 bastion LinuxCommandsWazuh: User aman [3894870]: 259 ls Oct 3 12:23:57 bastion LinuxCommandsWazuh: User aman [3894870]: 260 clear Oct 3 12:24:07 bastion LinuxCommandsWazuh: User aman [3895645]: 261 exit Oct 3 12:24:25 bastion LinuxCommandsWazuh: User aman [3895645]: 262 mongo Oct 3 12:24:29 bastion LinuxCommandsWazuh: User aman [3895645]: 263 clear Oct 3 12:24:29 bastion LinuxCommandsWazuh: User aman [3895645]: 264 psql Oct 3 12:24:50 bastion LinuxCommandsWazuh: User aman [3895645]: 265 clear Oct 3 12:24:56 bastion LinuxCommandsWazuh: User aman [3895645]: 266 psql Oct 3 12:25:23 bastion LinuxCommandsWazuh: User aman [3895645]: 267 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2] Oct 3 12:25:25 bastion LinuxCommandsWazuh: message repeated 3 times: [ User aman [3895645]: 267 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2]] Oct 3 12:25:34 bastion LinuxCommandsWazuh: User aman [3895645]: 268 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Oct 3 12:25:35 bastion LinuxCommandsWazuh: User aman [3895645]: 269 clear Oct 3 12:52:52 bastion LinuxCommandsWazuh: User mohtashim [3924708]: 617 clickhouse-ssh Oct 3 12:52:59 bastion LinuxCommandsWazuh: User mohtashim [3924708]: 618 k get hpa Oct 3 12:55:03 bastion LinuxCommandsWazuh: User aman [3926888]: 270 exit Oct 3 12:55:04 bastion LinuxCommandsWazuh: User aman [3926888]: 271 clear Oct 3 12:55:30 bastion LinuxCommandsWazuh: User aman [3926888]: 272 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Oct 3 12:55:31 bastion LinuxCommandsWazuh: User aman [3926888]: 273 clear Oct 3 13:11:10 bastion LinuxCommandsWazuh: User mohtashim [3937468]: 619 htop Oct 3 13:19:06 bastion LinuxCommandsWazuh: User ankur [3938245]: 1995 byobu Oct 3 13:19:07 bastion LinuxCommandsWazuh: User ankur [3938245]: 1996 ls Oct 3 13:25:07 bastion LinuxCommandsWazuh: User mohtashim [3943953]: 619 htop Oct 3 13:28:28 bastion LinuxCommandsWazuh: User ankur [3938245]: 1997 byobu Oct 3 13:30:37 bastion LinuxCommandsWazuh: User ankur [3947829]: 1995 exit Oct 3 13:35:10 bastion LinuxCommandsWazuh: User venky [3952216]: 1998 internal Oct 3 13:35:18 bastion LinuxCommandsWazuh: User venky [3952216]: 1999 k get configmap Oct 3 13:35:28 bastion LinuxCommandsWazuh: User venky [3952216]: 2000 kubectl get configmap Oct 3 13:35:52 bastion LinuxCommandsWazuh: User venky [3952216]: 2001 k edit configmap chatbot-config Oct 3 13:36:48 bastion LinuxCommandsWazuh: User ankur [3771893]: 1996 clickhouse-ssh Oct 3 13:37:02 bastion LinuxCommandsWazuh: User mohtashim [3954789]: 622 clickhouse-ssh Oct 3 13:42:40 bastion LinuxCommandsWazuh: User venky [3952216]: 2002 kubectl edit configmap chatbot-config Oct 3 13:42:55 bastion LinuxCommandsWazuh: User venky [3952216]: 2003 kubectl rollut restart deploy chatbot Oct 3 13:43:02 bastion LinuxCommandsWazuh: User venky [3952216]: 2004 kubectl rollout restart deploy chatbot Oct 3 13:52:41 bastion LinuxCommandsWazuh: User mohtashim [3970048]: 622 clickhouse-ssh Oct 3 14:00:32 bastion LinuxCommandsWazuh: User venky [3952216]: 2004 kubectl rollout restart deploy chatbot Oct 3 15:21:00 bastion LinuxCommandsWazuh: User mohtashim [4058698]: 624 clickhouse-ssh Oct 3 15:45:19 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 15:45:24 bastion LinuxCommandsWazuh: User ashish [4082922]: 515 byobu Oct 3 15:53:37 bastion LinuxCommandsWazuh: User ashish [4082922]: 516 mongo pixel_v1; Oct 3 15:53:41 bastion LinuxCommandsWazuh: User ashish [4082922]: 517 byobu Oct 3 15:54:03 bastion LinuxCommandsWazuh: User ashish [4082922]: 518 Clickhouse-ssh Oct 3 15:55:25 bastion LinuxCommandsWazuh: User ashish [4082922]: 519 clickhouse-ssh Oct 3 15:55:43 bastion LinuxCommandsWazuh: User ashish [4082922]: 520 kubectl get pods Oct 3 15:55:50 bastion LinuxCommandsWazuh: User ashish [4082922]: 520 kubectl get pods Oct 3 15:55:50 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [4082922]: 520 kubectl get pods] Oct 3 15:55:57 bastion LinuxCommandsWazuh: User ashish [4082922]: 521 kubectl get pods | grep house Oct 3 15:56:12 bastion LinuxCommandsWazuh: User ashish [4082922]: 522 kubectl exec -it house-of-click-774b5565cd-pjgnw Oct 3 15:57:00 bastion LinuxCommandsWazuh: User ashish [4082922]: 523 kubectl exec -it house-of-click-774b5565cd-pjgnw bash Oct 3 15:57:01 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 15:57:02 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [4082800]: 515 byobu] Oct 3 16:15:38 bastion LinuxCommandsWazuh: User ubuntu [4124227]: 1999 exit Oct 3 16:15:41 bastion LinuxCommandsWazuh: User ubuntu [4124227]: 2000 mongosh Oct 3 16:15:44 bastion LinuxCommandsWazuh: User rihan [4124368]: 1394 psql -U dbuser -d nitrox_v2 Oct 3 16:15:46 bastion LinuxCommandsWazuh: User rihan [4124368]: 1395 cd Oct 3 16:15:49 bastion LinuxCommandsWazuh: User rihan [4124368]: 1396 mongosh Oct 3 16:24:01 bastion LinuxCommandsWazuh: User rihan [4124368]: 1397 mongo Oct 3 16:33:47 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 16:33:56 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [4082800]: 515 byobu] Oct 3 16:34:13 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 16:34:14 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 16:34:20 bastion LinuxCommandsWazuh: User ashish [4082800]: 515 byobu Oct 3 16:34:23 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ashish [4082800]: 515 byobu] Oct 3 16:34:26 bastion LinuxCommandsWazuh: User ashish [4143323]: 523 kubectl exec -it house-of-click-774b5565cd-pjgnw bash Oct 3 16:34:30 bastion LinuxCommandsWazuh: User ashish [4143440]: 523 kubectl exec -it house-of-click-774b5565cd-pjgnw bash Oct 3 16:49:35 bastion LinuxCommandsWazuh: User rihan [4172903]: 1397 mongo Oct 3 16:58:44 bastion LinuxCommandsWazuh: User rihan [4187747]: 1397 mongo Oct 3 17:13:06 bastion LinuxCommandsWazuh: User ping-pong [8015]: 61 exit Oct 3 17:20:55 bastion LinuxCommandsWazuh: User ashish [16062]: 524 byobu Oct 3 17:21:40 bastion LinuxCommandsWazuh: User mohtashim [17519]: 624 clickhouse-ssh Oct 3 17:23:19 bastion LinuxCommandsWazuh: User mohtashim [17519]: 625 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 3 17:28:06 bastion LinuxCommandsWazuh: User aman [30147]: 274 exit Oct 3 17:28:09 bastion LinuxCommandsWazuh: User aman [30147]: 275 clear Oct 3 17:28:21 bastion LinuxCommandsWazuh: User aman [30147]: 275 clear Oct 3 17:28:27 bastion LinuxCommandsWazuh: User aman [30147]: 276 nano Makefile Oct 3 17:28:49 bastion LinuxCommandsWazuh: User aman [30147]: 277 kubectl get pods | grep cookie-cutter Oct 3 17:29:14 bastion LinuxCommandsWazuh: User aman [30147]: 278 kubectl logs -f cookie-cutter-75bbbcc9bf-28p5m Oct 3 17:29:14 bastion LinuxCommandsWazuh: User aman [30147]: 278 kubectl logs -f cookie-cutter-75bbbcc9bf-28p5m Oct 3 17:29:19 bastion LinuxCommandsWazuh: User aman [30147]: 279 clar Oct 3 17:29:20 bastion LinuxCommandsWazuh: User aman [30147]: 280 clear Oct 3 17:29:26 bastion LinuxCommandsWazuh: User aman [30147]: 281 kubectl get pods | grep nitrox Oct 3 17:29:40 bastion LinuxCommandsWazuh: User aman [30147]: 282 kubectl logs -f nitrox-dj-744ddb88d9-bgr2m Oct 3 17:29:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User aman [30147]: 282 kubectl logs -f nitrox-dj-744ddb88d9-bgr2m] Oct 3 17:29:43 bastion LinuxCommandsWazuh: User aman [30147]: 283 clear Oct 3 17:30:13 bastion LinuxCommandsWazuh: User aman [30147]: 284 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Oct 3 17:30:15 bastion LinuxCommandsWazuh: User aman [30147]: 285 clear Oct 3 17:38:06 bastion LinuxCommandsWazuh: User mohtashim [49913]: 624 clickhouse-ssh Oct 3 17:46:27 bastion LinuxCommandsWazuh: User mohtashim [49913]: 625 mongo pixel_v1 Oct 3 17:47:10 bastion LinuxCommandsWazuh: User mohtashim [17519]: 626 psql Oct 3 17:47:53 bastion LinuxCommandsWazuh: User ubuntu [69019]: 1999 sudo su rihan Oct 3 17:47:56 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2000 cd .. Oct 3 17:47:56 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2001 ls Oct 3 17:48:01 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2002 cd ping-pong/ Oct 3 17:48:02 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2003 ls Oct 3 17:48:03 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2004 cd .ssh/ Oct 3 17:48:03 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2005 ls Oct 3 17:48:09 bastion LinuxCommandsWazuh: User ping-pong [69578]: 61 exit Oct 3 17:48:10 bastion LinuxCommandsWazuh: User ping-pong [69578]: 62 ls Oct 3 17:48:10 bastion LinuxCommandsWazuh: User ping-pong [69578]: 63 cd Oct 3 17:48:10 bastion LinuxCommandsWazuh: User ping-pong [69578]: 64 ls Oct 3 17:48:12 bastion LinuxCommandsWazuh: User ping-pong [69578]: 64 ls Oct 3 17:48:13 bastion LinuxCommandsWazuh: User ping-pong [69578]: 65 cd .ssh/ Oct 3 17:48:14 bastion LinuxCommandsWazuh: User ping-pong [69578]: 66 ls Oct 3 17:48:16 bastion LinuxCommandsWazuh: User ping-pong [69578]: 67 cat authorized_keys Oct 3 17:49:10 bastion LinuxCommandsWazuh: User ping-pong [69578]: 68 sudo vi authorized_keys Oct 3 17:49:18 bastion LinuxCommandsWazuh: User ping-pong [69578]: 68 sudo vi authorized_keys Oct 3 17:49:23 bastion LinuxCommandsWazuh: User ping-pong [69578]: 68 sudo vi authorized_keys Oct 3 17:49:26 bastion LinuxCommandsWazuh: User ping-pong [69578]: 69 docker ps Oct 3 17:49:29 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2006 sudo su ping-pong Oct 3 17:49:31 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2007 docker ps Oct 3 17:49:35 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2008 k get pods Oct 3 17:49:43 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2009 kubectl get pods Oct 3 17:49:50 bastion LinuxCommandsWazuh: User ashish [72973]: 524 byobu Oct 3 17:49:58 bastion LinuxCommandsWazuh: User ashish [72973]: 524 byobu Oct 3 17:50:02 bastion LinuxCommandsWazuh: User ashish [73478]: 524 byobu Oct 3 17:50:10 bastion LinuxCommandsWazuh: User ashish [4143440]: 524 clickhouse-ssh Oct 3 17:50:12 bastion LinuxCommandsWazuh: User ashish [4143440]: 525 clear Oct 3 17:50:16 bastion LinuxCommandsWazuh: User ashish [4143440]: 525 clear Oct 3 17:50:16 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [4143440]: 525 clear] Oct 3 17:50:40 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2010 ls Oct 3 17:50:42 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2010 ls Oct 3 17:50:43 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2011 cd Oct 3 17:50:43 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2012 ls Oct 3 17:50:53 bastion LinuxCommandsWazuh: User ping-pong [75713]: 70 exit Oct 3 17:50:54 bastion LinuxCommandsWazuh: User ping-pong [75713]: 71 cd Oct 3 17:50:54 bastion LinuxCommandsWazuh: User ping-pong [75713]: 72 ls Oct 3 17:50:56 bastion LinuxCommandsWazuh: User ping-pong [75713]: 72 ls Oct 3 17:51:00 bastion LinuxCommandsWazuh: User ping-pong [75713]: 73 hitory Oct 3 17:51:02 bastion LinuxCommandsWazuh: User ping-pong [75713]: 74 history Oct 3 17:51:18 bastion LinuxCommandsWazuh: User ubuntu [69019]: 2013 sudo su ping-pong Oct 3 18:01:19 bastion LinuxCommandsWazuh: User ubuntu [104479]: 1999 exit Oct 3 18:01:19 bastion LinuxCommandsWazuh: User ubuntu [104479]: 2000 who Oct 3 18:02:19 bastion LinuxCommandsWazuh: User ashish [4143440]: 526 mongo pixel_v1; Oct 3 18:39:51 bastion LinuxCommandsWazuh: User mohtashim [49913]: 625 mongo pixel_v1 Oct 3 18:44:31 bastion LinuxCommandsWazuh: User ubuntu [171319]: 1999 who Oct 3 18:44:41 bastion LinuxCommandsWazuh: User ubuntu [171319]: 2000 mongo Oct 3 18:45:20 bastion LinuxCommandsWazuh: User ubuntu [171319]: 2001 mongo-ssh Oct 3 18:45:23 bastion LinuxCommandsWazuh: User ubuntu [171319]: 2002 k get hpa