Oct 15 10:57:45 bastion LinuxCommandsWazuh: User nikhils-art [3028582]: 28 zodiac-server Oct 15 10:57:56 bastion LinuxCommandsWazuh: User nikhils-art [3028582]: 29 ls Oct 15 10:58:00 bastion LinuxCommandsWazuh: User nikhils-art [3028582]: 29 ls Oct 15 11:01:52 bastion LinuxCommandsWazuh: User nikhils-art [3029090]: 30 zodiac-server Oct 15 11:04:27 bastion LinuxCommandsWazuh: User nikhils-art [3029090]: 30 zodiac-server Oct 15 11:06:09 bastion LinuxCommandsWazuh: User sandeep [3030010]: 28 zodiac-server Oct 15 11:06:46 bastion LinuxCommandsWazuh: User nikhils-art [3029090]: 30 zodiac-server Oct 15 11:08:28 bastion LinuxCommandsWazuh: User sandeep [3030010]: 28 zodiac-server Oct 15 11:20:06 bastion LinuxCommandsWazuh: User nikhils-art [3031126]: 31 exit Oct 15 11:22:20 bastion LinuxCommandsWazuh: User nikhils-art [3031126]: 32 zodiac-server Oct 15 11:29:24 bastion LinuxCommandsWazuh: User nikhils-art [3031126]: 32 zodiac-server Oct 15 11:45:19 bastion LinuxCommandsWazuh: User aman [3033669]: 402 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 15 11:45:39 bastion LinuxCommandsWazuh: User aman [3033669]: 402 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 15 11:47:51 bastion LinuxCommandsWazuh: User aman [3034504]: 403 exit Oct 15 11:47:52 bastion LinuxCommandsWazuh: User aman [3034504]: 404 clear Oct 15 11:49:33 bastion LinuxCommandsWazuh: User aman [3034504]: 405 mongo Oct 15 11:49:34 bastion LinuxCommandsWazuh: User aman [3034504]: 406 clear Oct 15 11:50:27 bastion LinuxCommandsWazuh: User aman [3034504]: 407 vim Makefile Oct 15 11:50:28 bastion LinuxCommandsWazuh: User aman [3034504]: 408 clear Oct 15 11:51:03 bastion LinuxCommandsWazuh: User aman [3034504]: 409 kubectl get pods | grep chat Oct 15 11:51:16 bastion LinuxCommandsWazuh: User aman [3034504]: 410 kubectl describe configmap chatbot-65b9dcc8b7-ffntf Oct 15 11:51:17 bastion LinuxCommandsWazuh: User anam [3035110]: 48 internal-tool Oct 15 11:51:27 bastion LinuxCommandsWazuh: User aman [3034504]: 411 kubect get configmap Oct 15 11:51:32 bastion LinuxCommandsWazuh: User aman [3034504]: 412 kubectl get configmap Oct 15 11:51:45 bastion LinuxCommandsWazuh: User aman [3034504]: 413 kubectl describe configmap chatbot-config Oct 15 11:52:06 bastion LinuxCommandsWazuh: User aman [3034504]: 414 kubectl get configmap Oct 15 11:52:27 bastion LinuxCommandsWazuh: User aman [3034504]: 415 kubectl describe nitrox-dj-config Oct 15 11:52:34 bastion LinuxCommandsWazuh: User aman [3034504]: 416 kubectl describe configmap nitrox-dj-config Oct 15 11:55:24 bastion LinuxCommandsWazuh: User nikhils-art [3031126]: 32 zodiac-server Oct 15 12:21:06 bastion LinuxCommandsWazuh: User anam [3035110]: 48 internal-tool Oct 15 12:51:14 bastion LinuxCommandsWazuh: User ashish [3041747]: 733 byobu Oct 15 13:02:25 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 507 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 15 13:02:39 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 508 stern vortex Oct 15 13:02:40 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 508 stern vortex Oct 15 13:20:08 bastion LinuxCommandsWazuh: User ashish [2780403]: 736 clickhouse-ssh Oct 15 13:20:08 bastion LinuxCommandsWazuh: User ashish [2780403]: 736 clickhouse-ssh Oct 15 13:20:11 bastion LinuxCommandsWazuh: User ashish [2780403]: 737 clear Oct 15 13:20:11 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [2780403]: 737 clear] Oct 15 13:20:16 bastion LinuxCommandsWazuh: User ashish [2460484]: 736 clickhouse-ssh Oct 15 13:20:18 bastion LinuxCommandsWazuh: User ashish [2780403]: 737 clear Oct 15 13:20:18 bastion LinuxCommandsWazuh: User ashish [3041747]: 733 byobu Oct 15 13:23:07 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 509 k get pods Oct 15 13:23:22 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 510 stern house-of-click Oct 15 13:23:23 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3053106]: 510 stern house-of-click] Oct 15 13:24:07 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 511 stern house-of-click | grep "error" Oct 15 13:24:44 bastion LinuxCommandsWazuh: User ubuntu [3071301]: 1999 exit Oct 15 13:35:39 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 512 mongo pixel_v1 Oct 15 13:35:45 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 513 stern vortex | grep Oct 15 13:35:46 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 513 stern vortex | grep Oct 15 13:41:48 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 514 stern vortex | grep "ValueError: invalid literal for int() with base 10" Oct 15 13:47:53 bastion LinuxCommandsWazuh: User mohtashim [3053106]: 515 mongo pixel_v1 Oct 15 14:47:01 bastion LinuxCommandsWazuh: User ubuntu [3079282]: 1999 cool-server Oct 15 14:52:29 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 1999 cool-server Oct 15 14:56:21 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 2000 redis-ssh Oct 15 14:56:28 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 2000 redis-ssh Oct 15 14:58:39 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 2000 redis-ssh Oct 15 14:58:46 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 2001 k get configmap Oct 15 15:02:40 bastion LinuxCommandsWazuh: User ubuntu [3079663]: 2002 dragonflydb-volatile-ssh Oct 15 15:03:44 bastion LinuxCommandsWazuh: User ubuntu [3080767]: 2000 exit Oct 15 15:05:27 bastion LinuxCommandsWazuh: User ayush [3081542]: 505 sudo su - aman Oct 15 15:05:33 bastion LinuxCommandsWazuh: User venky [3081567]: 2000 kubectl get po Oct 15 15:05:42 bastion LinuxCommandsWazuh: User venky [3081626]: 2000 kubectl get po Oct 15 15:05:44 bastion LinuxCommandsWazuh: User venky [3081626]: 2001 ls Oct 15 15:05:55 bastion LinuxCommandsWazuh: User ubuntu [3079282]: 1999 cool-server Oct 15 15:06:03 bastion LinuxCommandsWazuh: User venky [3082115]: 2000 kubectl get po Oct 15 15:09:16 bastion LinuxCommandsWazuh: User venky [3082115]: 2001 redis Oct 15 15:09:17 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3082115]: 2001 redis] Oct 15 15:09:20 bastion LinuxCommandsWazuh: User venky [3081626]: 2001 ls Oct 15 15:09:21 bastion LinuxCommandsWazuh: User venky [3081626]: 2001 ls Oct 15 15:09:21 bastion LinuxCommandsWazuh: User venky [3081567]: 2001 byobu Oct 15 15:09:22 bastion LinuxCommandsWazuh: User venky [3081567]: 2001 byobu Oct 15 15:09:23 bastion LinuxCommandsWazuh: User venky [3081567]: 2001 byobu Oct 15 15:09:23 bastion LinuxCommandsWazuh: User ayush [3081542]: 506 sudo su - venky Oct 15 15:10:03 bastion LinuxCommandsWazuh: User venky [3085395]: 2000 byobu Oct 15 15:10:17 bastion LinuxCommandsWazuh: User venky [3085395]: 2001 kubectl get configmaps nitrox-ck-config Oct 15 15:10:45 bastion LinuxCommandsWazuh: User venky [3085395]: 2002 kubectl edit configmaps nitrox-ck-config Oct 15 15:10:51 bastion LinuxCommandsWazuh: User venky [3085395]: 2003 ssh 10.190.0.112 Oct 15 15:14:13 bastion LinuxCommandsWazuh: User ubuntu [3080767]: 2001 dragonflydb-volatile-ssh Oct 15 15:14:36 bastion LinuxCommandsWazuh: User venky [3085395]: 2004 kubectl get po | queue Oct 15 15:14:39 bastion LinuxCommandsWazuh: User venky [3085395]: 2005 kubectl get po | grep queue Oct 15 15:14:53 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:15:16 bastion LinuxCommandsWazuh: User ubuntu [3085901]: 2000 exit Oct 15 15:16:33 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:16:34 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:16:42 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:17:25 bastion LinuxCommandsWazuh: User ayush [3081542]: 507 mongo Oct 15 15:17:26 bastion LinuxCommandsWazuh: User ayush [3081542]: 507 mongo Oct 15 15:17:45 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:17:45 bastion LinuxCommandsWazuh: User venky [3085395]: 2006 stern cookie-cutter-queues-67cd87d98b-qklsl Oct 15 15:18:00 bastion LinuxCommandsWazuh: User venky [3085395]: 2007 kubectl get po | grep cooki Oct 15 15:18:17 bastion LinuxCommandsWazuh: User venky [3085395]: 2008 stern cookie-cutter-queues-757875d497-tsg7h Oct 15 15:30:24 bastion LinuxCommandsWazuh: User aman [3087927]: 417 exit Oct 15 15:34:07 bastion LinuxCommandsWazuh: User aman [3087927]: 418 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 15 15:34:08 bastion LinuxCommandsWazuh: User aman [3087927]: 419 clear Oct 15 15:43:49 bastion LinuxCommandsWazuh: User ubuntu [3089199]: 2000 dragonflydb-volatile-ssh Oct 15 15:43:50 bastion LinuxCommandsWazuh: User ubuntu [3089199]: 2000 dragonflydb-volatile-ssh Oct 15 15:43:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3089199]: 2000 dragonflydb-volatile-ssh] Oct 15 15:43:51 bastion LinuxCommandsWazuh: User ubuntu [3089199]: 2000 dragonflydb-volatile-ssh Oct 15 16:10:41 bastion LinuxCommandsWazuh: User anam [3092483]: 49 exit Oct 15 16:13:32 bastion LinuxCommandsWazuh: User ubuntu [3092634]: 2000 dragonflydb-volatile-ssh Oct 15 16:21:03 bastion LinuxCommandsWazuh: User aman [3093706]: 420 exit Oct 15 16:21:43 bastion LinuxCommandsWazuh: User aman [3093706]: 421 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 15 16:21:44 bastion LinuxCommandsWazuh: User aman [3093706]: 422 clear Oct 15 16:21:46 bastion LinuxCommandsWazuh: User aman [3093706]: 423 exity Oct 15 16:28:24 bastion LinuxCommandsWazuh: User adil [3094606]: 197 crontab -l Oct 15 16:39:45 bastion LinuxCommandsWazuh: User mohtashim [3106071]: 516 exit Oct 15 16:40:24 bastion LinuxCommandsWazuh: User mohtashim [3106071]: 517 stern vortex | grep "vortex" Oct 15 16:40:24 bastion LinuxCommandsWazuh: User mohtashim [3106071]: 517 stern vortex | grep "vortex" Oct 15 16:40:33 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2000 cool-server Oct 15 16:40:45 bastion LinuxCommandsWazuh: User mohtashim [3106071]: 518 stern vortex | grep "error" Oct 15 16:40:47 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3106071]: 518 stern vortex | grep "error"] Oct 15 16:41:08 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2000 cool-server Oct 15 16:41:38 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2001 vi .bashrc Oct 15 16:41:48 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2002 crontab -e Oct 15 16:43:02 bastion LinuxCommandsWazuh: User mohtashim [3106071]: 519 stern vortex-59b5c998b7 Oct 15 16:43:02 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3106071]: 519 stern vortex-59b5c998b7] Oct 15 16:43:51 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2003 cat /usr/local/bin/login-notify.sh Oct 15 16:48:53 bastion LinuxCommandsWazuh: User ubuntu [3115511]: 2000 cool-server Oct 15 16:51:09 bastion LinuxCommandsWazuh: User ubuntu [3115511]: 2000 cool-server Oct 15 17:03:04 bastion LinuxCommandsWazuh: User ubuntu [3107113]: 2004 sudo vi /usr/local/bin/login-notify.sh Oct 15 17:03:10 bastion LinuxCommandsWazuh: User ubuntu [3129621]: 2000 exit Oct 15 17:03:23 bastion LinuxCommandsWazuh: User ubuntu [3129935]: 2000 exit Oct 15 17:03:36 bastion LinuxCommandsWazuh: User ubuntu [3130240]: 2000 exit Oct 15 17:11:44 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2000 exit Oct 15 17:11:50 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2001 sudo vi /usr/local/bin/login-notify.sh Oct 15 17:11:57 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2002 cat /usr/local/bin/login-notify.sh Oct 15 17:15:01 bastion LinuxCommandsWazuh: User nikhils-art [3141709]: 32 zodiac-server Oct 15 17:15:38 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2003 sudo vi /etc/ssh/sshd_config Oct 15 17:16:39 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2004 sudo nano /etc/ssh/sshd_config Oct 15 17:16:43 bastion LinuxCommandsWazuh: User ubuntu [3138594]: 2005 sudo systemctl restart ssh Oct 15 17:16:48 bastion LinuxCommandsWazuh: User ubuntu [3144086]: 2000 exit Oct 15 17:22:04 bastion LinuxCommandsWazuh: User ubuntu [3144086]: 2001 sudo vi /etc/ssh/sshd_config Oct 15 17:22:08 bastion LinuxCommandsWazuh: User ubuntu [3144086]: 2002 sudo systemctl restart ssh Oct 15 17:22:08 bastion LinuxCommandsWazuh: User ubuntu [3144086]: 2002 sudo systemctl restart ssh Oct 15 17:23:35 bastion LinuxCommandsWazuh: User ubuntu [3130240]: 2001 cool-server Oct 15 17:29:50 bastion LinuxCommandsWazuh: User mohtashim [3157204]: 516 exit Oct 15 17:29:54 bastion LinuxCommandsWazuh: User mohtashim [3157204]: 516 exit Oct 15 17:33:53 bastion LinuxCommandsWazuh: User venky [3161115]: 2000 stern cookie-cutter-queues-757875d497-tsg7h Oct 15 17:34:00 bastion LinuxCommandsWazuh: User venky [3161115]: 2000 stern cookie-cutter-queues-757875d497-tsg7h Oct 15 17:34:00 bastion LinuxCommandsWazuh: User venky [3161115]: 2000 stern cookie-cutter-queues-757875d497-tsg7h Oct 15 17:34:12 bastion LinuxCommandsWazuh: User venky [3161115]: 2001 kubectl get po Oct 15 17:34:20 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3161115]: 2001 kubectl get po ] Oct 15 17:35:21 bastion LinuxCommandsWazuh: User ayush [3161919]: 507 mongo Oct 15 17:35:26 bastion LinuxCommandsWazuh: User venky [3162051]: 2000 stern cookie-cutter-queues-757875d497-tsg7h Oct 15 17:35:46 bastion LinuxCommandsWazuh: User venky [3162051]: 2001 stern cookie-cutter- Oct 15 17:36:12 bastion LinuxCommandsWazuh: User venky [3162051]: 2001 stern cookie-cutter- Oct 15 17:36:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3162051]: 2001 stern cookie-cutter- ] Oct 15 17:36:17 bastion LinuxCommandsWazuh: User venky [3162051]: 2002 clear Oct 15 17:36:41 bastion LinuxCommandsWazuh: User venky [3162051]: 2003 redis Oct 15 17:36:49 bastion LinuxCommandsWazuh: User venky [3162051]: 2004 stern cookie-cutter- Oct 15 17:36:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3162051]: 2004 stern cookie-cutter- ] Oct 15 17:37:04 bastion LinuxCommandsWazuh: User venky [3161115]: 2002 stern cookie-cutter-queues-5fdc788476-8clb6 Oct 15 17:37:12 bastion LinuxCommandsWazuh: User venky [3161115]: 2002 stern cookie-cutter-queues-5fdc788476-8clb6 Oct 15 17:37:12 bastion LinuxCommandsWazuh: User venky [3161115]: 2002 stern cookie-cutter-queues-5fdc788476-8clb6 Oct 15 17:37:18 bastion LinuxCommandsWazuh: User venky [3162051]: 2005 redis Oct 15 17:37:19 bastion LinuxCommandsWazuh: User ayush [3161919]: 508 sudo su - venky Oct 15 17:40:08 bastion LinuxCommandsWazuh: User ubuntu [3162636]: 2000 exit Oct 15 17:42:01 bastion LinuxCommandsWazuh: User ubuntu [3162636]: 2001 cool-server Oct 15 17:42:02 bastion LinuxCommandsWazuh: User ubuntu [3162636]: 2001 cool-server Oct 15 18:08:00 bastion LinuxCommandsWazuh: User ping-pong [3165811]: 246 exit Oct 15 18:37:57 bastion LinuxCommandsWazuh: User mohtashim [3168595]: 521 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 15 18:47:11 bastion LinuxCommandsWazuh: User mohtashim [3169595]: 521 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 15 19:14:01 bastion LinuxCommandsWazuh: User mohtashim [3168595]: 522 make cookie-bash Oct 15 19:18:04 bastion LinuxCommandsWazuh: User mohtashim [3169595]: 522 mongo pixel_v1