Nov 10 08:48:20 bastion LinuxCommandsWazuh: User ankur [3135457]: 503 byobu Nov 10 11:04:09 bastion LinuxCommandsWazuh: User sarthak.s [3157808]: 43 zodiac-ssh Nov 10 11:04:40 bastion LinuxCommandsWazuh: User saurav [3157917]: 32 zodiac-server Nov 10 11:35:09 bastion LinuxCommandsWazuh: User anam [3160608]: 153 vpn-server Nov 10 12:06:47 bastion LinuxCommandsWazuh: User sarthak.s [3164299]: 43 zodiac-ssh Nov 10 12:19:09 bastion LinuxCommandsWazuh: User anam [3165435]: 153 vpn-server Nov 10 12:19:31 bastion LinuxCommandsWazuh: User anam [3165435]: 154 sudo su ubuntu Nov 10 12:19:42 bastion LinuxCommandsWazuh: User anam [3165435]: 154 sudo su ubuntu Nov 10 12:20:19 bastion LinuxCommandsWazuh: User aman [3165754]: 535 exit Nov 10 12:20:43 bastion LinuxCommandsWazuh: User ashish [3165873]: 871 byobu Nov 10 12:20:45 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3165873]: 871 byobu] Nov 10 12:20:47 bastion LinuxCommandsWazuh: User ashish [3165948]: 871 byobu Nov 10 12:20:48 bastion LinuxCommandsWazuh: User aman [3165754]: 536 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 12:20:54 bastion LinuxCommandsWazuh: User ashish [3165948]: 872 kubectl get pods Nov 10 12:21:07 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 12:21:28 bastion LinuxCommandsWazuh: User aman [3165754]: 536 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 12:22:17 bastion LinuxCommandsWazuh: User aman [3165754]: 537 psql -h 10.94.16.3 -p 5432 -U db_user -d assistant_pg Nov 10 12:22:19 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 1998 kubectl get pods -n loki Nov 10 12:22:25 bastion LinuxCommandsWazuh: User abhijeet [3167872]: 1998 kubectl get pods -n loki Nov 10 12:22:36 bastion LinuxCommandsWazuh: User anam [3168054]: 153 vpn-server Nov 10 12:22:37 bastion LinuxCommandsWazuh: User anam [3168054]: 154 cd Nov 10 12:22:37 bastion LinuxCommandsWazuh: User anam [3168054]: 155 ls Nov 10 12:22:43 bastion LinuxCommandsWazuh: User anam [3168054]: 156 grops Nov 10 12:22:46 bastion LinuxCommandsWazuh: User anam [3168054]: 157 groups Nov 10 12:22:51 bastion LinuxCommandsWazuh: User abhijeet [3167872]: 1999 groups Nov 10 12:23:28 bastion LinuxCommandsWazuh: User aman [3165754]: 538 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 12:23:29 bastion LinuxCommandsWazuh: User aman [3165754]: 539 clear Nov 10 12:23:53 bastion LinuxCommandsWazuh: User abhijeet [3167872]: 2000 sudo usermod -aG ubuntu anam Nov 10 12:23:58 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 1999 sudo su anam Nov 10 12:24:02 bastion LinuxCommandsWazuh: User anam [3169466]: 158 exit Nov 10 12:24:03 bastion LinuxCommandsWazuh: User anam [3169466]: 159 cd Nov 10 12:24:11 bastion LinuxCommandsWazuh: User anam [3169466]: 160 sudo su ubuntu Nov 10 12:24:38 bastion LinuxCommandsWazuh: User abhijeet [3167872]: 2001 sudo usermod -aG google-sudoers anam Nov 10 12:24:44 bastion LinuxCommandsWazuh: User anam [3169466]: 161 groups Nov 10 12:24:46 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 1999 sudo su anam Nov 10 12:24:48 bastion LinuxCommandsWazuh: User anam [3170208]: 162 exit Nov 10 12:24:49 bastion LinuxCommandsWazuh: User anam [3170208]: 163 groups Nov 10 12:24:53 bastion abhijeet: root@ [3170305]: exit [0] Nov 10 12:24:54 bastion LinuxCommandsWazuh: User anam [3170208]: 164 sudo su Nov 10 12:24:55 bastion LinuxCommandsWazuh: User anam [3170208]: 165 cd Nov 10 12:24:58 bastion LinuxCommandsWazuh: User ubuntu [3170423]: 2000 cool-server Nov 10 12:25:00 bastion LinuxCommandsWazuh: User anam [3170208]: 166 sudo su ubuntu Nov 10 12:25:04 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 1999 sudo su anam Nov 10 12:25:04 bastion LinuxCommandsWazuh: User anam [3165435]: 155 sudo su abhijeet Nov 10 12:25:06 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 2000 ls Nov 10 12:25:18 bastion LinuxCommandsWazuh: User anam [3165435]: 156 sudo su ubuntu Nov 10 12:25:31 bastion LinuxCommandsWazuh: User anam [3171851]: 171 exit Nov 10 12:25:38 bastion LinuxCommandsWazuh: User ubuntu [3171986]: 2000 exit Nov 10 12:25:50 bastion LinuxCommandsWazuh: User ubuntu [3171986]: 2001 crontab -l Nov 10 12:52:21 bastion LinuxCommandsWazuh: User sarthak.s [3184889]: 43 zodiac-ssh Nov 10 12:58:38 bastion LinuxCommandsWazuh: User ashish [3185684]: 871 byobu Nov 10 12:58:45 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 12:59:27 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 12:59:32 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ashish [3165948]: 873 kubectl get pods | grep "cookie"] Nov 10 13:00:07 bastion LinuxCommandsWazuh: User aman [3165754]: 540 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 13:00:08 bastion LinuxCommandsWazuh: User aman [3165754]: 541 clear Nov 10 13:00:52 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 13:02:19 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 13:02:19 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 13:02:20 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 13:02:20 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [3165948]: 873 kubectl get pods | grep "cookie"] Nov 10 13:02:21 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2000 crontab -l Nov 10 13:02:22 bastion LinuxCommandsWazuh: User ashish [3165948]: 873 kubectl get pods | grep "cookie" Nov 10 13:02:22 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2001 ls Nov 10 13:02:22 bastion LinuxCommandsWazuh: User ashish [3185684]: 871 byobu Nov 10 13:02:24 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2002 cd bin/ Nov 10 13:02:25 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2003 ls Nov 10 13:02:28 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2004 cat start_slack.sh Nov 10 13:05:10 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2005 sudo vi start_slack.sh Nov 10 13:05:17 bastion LinuxCommandsWazuh: User ubuntu [3189542]: 2006 ./start_slack.sh Nov 10 13:10:42 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 2000 ls Nov 10 13:13:57 bastion LinuxCommandsWazuh: User anam [3190928]: 172 sudo su ubuntu Nov 10 13:14:08 bastion LinuxCommandsWazuh: User anam [3190928]: 173 cronjon -l Nov 10 13:14:09 bastion LinuxCommandsWazuh: User aman [3191062]: 542 exit Nov 10 13:14:18 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2000 exit Nov 10 13:14:24 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2001 cronjon -l Nov 10 13:14:34 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2002 cronjob -l Nov 10 13:14:47 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2003 crontab -l Nov 10 13:14:51 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2004 pwd Nov 10 13:15:02 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2005 cd /ubuntu Nov 10 13:15:08 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2006 cd /bin Nov 10 13:15:13 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2007 ls Nov 10 13:15:43 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2008 cat start_slack.sh Nov 10 13:15:48 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2009 cd Nov 10 13:15:53 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2010 crontab -l Nov 10 13:15:58 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2011 cat start_slack.sh Nov 10 13:16:22 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2012 cd /home/ubuntu/bin/start_slack.sh Nov 10 13:16:35 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2013 /home/ubuntu/bin/ Nov 10 13:16:39 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2014 /home/ubuntu/bin Nov 10 13:16:44 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2015 /home/ubuntu Nov 10 13:19:08 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2016 cd /home/ubuntu Nov 10 13:19:22 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2017 cd /bin Nov 10 13:19:48 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2018 pwd Nov 10 13:19:58 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2019 cd Nov 10 13:20:02 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2020 cd bin Nov 10 13:20:04 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2021 pwd Nov 10 13:20:08 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2022 ls Nov 10 13:20:41 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2023 cat start_slack.sh Nov 10 13:22:09 bastion LinuxCommandsWazuh: User aman [3191062]: 543 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 13:22:10 bastion LinuxCommandsWazuh: User aman [3191062]: 544 clear Nov 10 13:22:58 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2024 start_slack.sh Nov 10 13:23:09 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 257 exit Nov 10 13:23:20 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2025 nano start_slack.sh Nov 10 13:24:44 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 1998 exit Nov 10 13:24:52 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 1999 ls Nov 10 13:26:00 bastion LinuxCommandsWazuh: User ubuntu [3193375]: 2000 exit Nov 10 13:27:53 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2026 nano cpu_and_memory.sh Nov 10 13:33:11 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2027 nano ssh_monitor.sh Nov 10 13:33:13 bastion LinuxCommandsWazuh: User ubuntu [3191084]: 2028 ls Nov 10 13:33:21 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2000 vim Makefile Nov 10 13:33:24 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2001 ls Nov 10 13:33:29 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2001 ls Nov 10 13:33:34 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2002 cd .. Nov 10 13:33:35 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2003 ls Nov 10 13:33:42 bastion LinuxCommandsWazuh: User ubuntu [3193375]: 2001 cool-server Nov 10 13:33:47 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2004 cd stage/ Nov 10 13:34:04 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2005 cd stage Nov 10 13:34:15 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2006 cd / Nov 10 13:34:18 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2007 ls Nov 10 13:34:24 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2008 cd home/ Nov 10 13:34:29 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2009 cd stage/ Nov 10 13:35:27 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2010 sudo cd stage/ Nov 10 13:35:52 bastion LinuxCommandsWazuh: User abhijeet [3192582]: 2010 sudo cd stage/ Nov 10 13:35:53 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [3192582]: 2010 sudo cd stage/] Nov 10 13:35:55 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 258 sudo su abhijeet Nov 10 13:36:01 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 259 ls Nov 10 13:36:14 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 259 ls Nov 10 13:36:17 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 260 cd / Nov 10 13:36:18 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 261 ls Nov 10 13:36:25 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 262 cd home/ Nov 10 13:36:25 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 263 ls Nov 10 13:36:32 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 264 cd stage/ Nov 10 13:37:07 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 265 ls Nov 10 13:37:11 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 266 cd ping-pong/ Nov 10 13:37:18 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 267 ls Nov 10 13:39:12 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 268 vim Makefile Nov 10 13:40:05 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 746 exit Nov 10 13:41:02 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 747 stern datapulse | grep "Access scope not found for resource:" Nov 10 13:41:08 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 257 exit Nov 10 13:41:09 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 258 cd Nov 10 13:41:27 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 259 ssh-keygen Nov 10 13:41:28 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 259 ssh-keygen Nov 10 13:41:29 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 260 ls Nov 10 13:41:30 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 260 ls Nov 10 13:41:52 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 261 cat .ssh/id_rsa.pub Nov 10 13:42:36 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 262 ssh ubuntu@34.131.126.168 Nov 10 13:43:19 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 263 vim .bashrc Nov 10 13:43:23 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 264 source .bashrc Nov 10 13:43:32 bastion LinuxCommandsWazuh: User ping-pong [3195092]: 265 stage-ssh Nov 10 13:44:21 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 269 ls Nov 10 13:44:26 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 270 cd / Nov 10 13:44:27 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 271 ls Nov 10 13:44:30 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 272 cd home/ Nov 10 13:44:30 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 273 ls Nov 10 13:44:33 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 274 cd ping-pong/ Nov 10 13:44:39 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 275 cd / Nov 10 13:44:41 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 276 cd home/ Nov 10 13:44:44 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 277 cd stage/ Nov 10 13:44:49 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 278 ls Nov 10 13:45:06 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 279 cd ping-pong/ Nov 10 13:45:06 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 280 ls Nov 10 13:46:01 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 281 vim Makefile Nov 10 13:46:06 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 282 make service Nov 10 13:46:30 bastion LinuxCommandsWazuh: User ayush [3196201]: 580 kubectl logs -f chatbot-7cb8bf9588-m7nbh Nov 10 13:46:33 bastion LinuxCommandsWazuh: User ayush [3196201]: 581 clear Nov 10 13:46:57 bastion LinuxCommandsWazuh: User ayush [3196201]: 581 clear Nov 10 13:47:11 bastion LinuxCommandsWazuh: User ayush [1405258]: 556 kubectl logs -f ray-chatbot-984476d67-vmhrj Nov 10 13:47:13 bastion LinuxCommandsWazuh: User ayush [1398230]: 563 kubectl edit configmap ray-patched-config Nov 10 13:47:21 bastion LinuxCommandsWazuh: User venky [1383274]: 2004 kubectl edit configmap ray-chatbot-config Nov 10 13:47:23 bastion LinuxCommandsWazuh: User venky [1383274]: 2004 kubectl edit configmap ray-chatbot-config Nov 10 13:47:23 bastion LinuxCommandsWazuh: User ayush [3684421]: 562 sudo su - venky Nov 10 13:47:25 bastion LinuxCommandsWazuh: User ayush [3684421]: 562 sudo su - venky Nov 10 13:47:28 bastion LinuxCommandsWazuh: User venky [2879016]: 2001 redis Nov 10 13:47:29 bastion LinuxCommandsWazuh: User ayush [909095]: 533 sudo su - venky Nov 10 13:47:30 bastion LinuxCommandsWazuh: User ayush [909095]: 533 sudo su - venky Nov 10 13:47:37 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 283 clear Nov 10 13:47:41 bastion LinuxCommandsWazuh: User ayush [3197016]: 605 sudo su - venky Nov 10 13:47:43 bastion LinuxCommandsWazuh: User ayush [3197055]: 605 sudo su - venky Nov 10 13:48:26 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 284 vim Makefile Nov 10 13:48:31 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 285 make all Nov 10 13:48:36 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 285 make all Nov 10 13:48:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ping-pong [3192525]: 285 make all] Nov 10 13:48:38 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 286 clear Nov 10 13:48:39 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 287 ls Nov 10 13:49:08 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 288 vim README.md Nov 10 13:49:12 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 289 ls Nov 10 13:51:19 bastion LinuxCommandsWazuh: User aman [3191062]: 545 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 13:51:21 bastion LinuxCommandsWazuh: User aman [3191062]: 546 clear Nov 10 13:52:48 bastion LinuxCommandsWazuh: User aman [3191062]: 547 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 13:52:49 bastion LinuxCommandsWazuh: User aman [3191062]: 548 clear Nov 10 13:53:05 bastion LinuxCommandsWazuh: User aman [3191062]: 549 kubectl get pods | grep chat Nov 10 13:53:41 bastion LinuxCommandsWazuh: User anam [3202951]: 172 sudo su ubuntu Nov 10 13:55:17 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 290 vim Makefile Nov 10 13:55:21 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 291 clear Nov 10 13:55:22 bastion LinuxCommandsWazuh: User ping-pong [3192525]: 292 cd Nov 10 13:59:10 bastion LinuxCommandsWazuh: User aman [3191062]: 550 kubectl logs -f chatbot-569db7ffdf-d6qsk Nov 10 13:59:10 bastion LinuxCommandsWazuh: User aman [3191062]: 550 kubectl logs -f chatbot-569db7ffdf-d6qsk Nov 10 13:59:12 bastion LinuxCommandsWazuh: User aman [3191062]: 551 clear Nov 10 13:59:33 bastion LinuxCommandsWazuh: User aman [3191062]: 552 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 14:00:51 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 1998 exit Nov 10 14:00:51 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 1999 ;s Nov 10 14:00:52 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 2000 ls Nov 10 14:00:58 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 2001 printenv Nov 10 14:01:06 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 2002 printenv | grep SL Nov 10 14:01:17 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2000 exit Nov 10 14:01:18 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2001 cd Nov 10 14:01:27 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2002 printenv Nov 10 14:01:32 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2003 printenv | grep SLA Nov 10 14:01:33 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2004 printenv | grep SL Nov 10 14:01:49 bastion LinuxCommandsWazuh: User abhijeet [3167688]: 2001 sudo su ping-pong Nov 10 14:02:32 bastion LinuxCommandsWazuh: User aman [3191062]: 553 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 14:02:33 bastion LinuxCommandsWazuh: User aman [3191062]: 554 clear Nov 10 14:03:16 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2005 ls Nov 10 14:03:24 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2006 cd bin/ Nov 10 14:03:24 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2007 ls Nov 10 14:03:30 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2008 cat cpu_and_memory.sh Nov 10 14:04:18 bastion LinuxCommandsWazuh: User aman [3191062]: 555 kubectl get pods | grep chatbot Nov 10 14:05:22 bastion LinuxCommandsWazuh: User aman [3191062]: 556 kubectl logs -f chatbot-74849847d-z5qtk Nov 10 14:05:23 bastion LinuxCommandsWazuh: User aman [3191062]: 556 kubectl logs -f chatbot-74849847d-z5qtk Nov 10 14:09:56 bastion LinuxCommandsWazuh: User aman [3191062]: 557 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 14:09:57 bastion LinuxCommandsWazuh: User aman [3191062]: 558 clear Nov 10 14:10:33 bastion LinuxCommandsWazuh: User aman [3191062]: 558 clear Nov 10 14:10:34 bastion LinuxCommandsWazuh: message repeated 2 times: [ User aman [3191062]: 558 clear] Nov 10 14:17:50 bastion LinuxCommandsWazuh: User ubuntu [3211152]: 2009 ls Nov 10 14:17:53 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 2003 sudo su ubuntu Nov 10 14:17:53 bastion LinuxCommandsWazuh: User abhijeet [3210549]: 2004 ls Nov 10 14:37:38 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 1998 exit Nov 10 14:38:33 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 1999 kubectl get pods -n loki Nov 10 14:39:37 bastion LinuxCommandsWazuh: User ashish [3250641]: 873 kubectl get pods | grep "cookie" Nov 10 14:39:43 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2000 kubectl get pods -n loki Nov 10 14:39:45 bastion LinuxCommandsWazuh: User ashish [3250641]: 874 kubectl get pods Nov 10 14:40:07 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2000 kubectl get pods -n loki Nov 10 14:40:24 bastion LinuxCommandsWazuh: User ashish [3250641]: 874 kubectl get pods Nov 10 14:40:55 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2000 kubectl get pods -n loki Nov 10 14:40:57 bastion LinuxCommandsWazuh: User ashish [3250641]: 874 kubectl get pods Nov 10 14:44:10 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 302 exit Nov 10 14:44:12 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 303 ls Nov 10 14:44:40 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 304 vim Makefile Nov 10 14:44:53 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 305 clear Nov 10 14:44:53 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 306 ls Nov 10 14:45:13 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 306 ls Nov 10 14:45:58 bastion LinuxCommandsWazuh: User ping-pong [3257636]: 302 exit Nov 10 14:46:00 bastion LinuxCommandsWazuh: User ping-pong [3257636]: 303 clear Nov 10 14:46:00 bastion LinuxCommandsWazuh: User ping-pong [3257636]: 304 ls Nov 10 14:49:46 bastion LinuxCommandsWazuh: User sarthak.s [3261277]: 43 zodiac-ssh Nov 10 14:51:17 bastion LinuxCommandsWazuh: User anam [3262907]: 175 sudo su ubuntu Nov 10 14:51:22 bastion LinuxCommandsWazuh: User anam [3262907]: 176 cd bin Nov 10 14:51:26 bastion LinuxCommandsWazuh: User anam [3262907]: 177 ls Nov 10 14:51:35 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 307 vim Makefile Nov 10 14:51:37 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2000 exit Nov 10 14:51:41 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2001 cd bin Nov 10 14:51:45 bastion LinuxCommandsWazuh: User ping-pong [3257636]: 305 make cookie-cutter-logs Nov 10 14:51:47 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2002 ls Nov 10 14:52:06 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2003 cd Nov 10 14:52:08 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2004 pwd Nov 10 14:52:12 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2005 cd bin Nov 10 14:52:15 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2006 ls Nov 10 14:52:15 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2001 kubectl get cm -n loki Nov 10 14:52:20 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2007 cat cpu_and_memory.sh Nov 10 14:53:52 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2002 kubectl edit cm prometheus-server -n loki Nov 10 14:54:05 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2003 kubectl get deployment -n loki Nov 10 14:54:24 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2004 kubectl rollout restart deployment prometheus-server -n loki Nov 10 14:55:33 bastion LinuxCommandsWazuh: User abhijeet [3248663]: 2005 kubectl get pods -n loki Nov 10 15:04:25 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2008 cat ssh_monitor.sh Nov 10 15:07:11 bastion LinuxCommandsWazuh: User ubuntu [3263260]: 2009 cat start_slack.sh Nov 10 15:42:05 bastion LinuxCommandsWazuh: User rihan [3313594]: 1494 sudo su ubuntu Nov 10 15:45:01 bastion LinuxCommandsWazuh: User aman [3191062]: 559 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 15:45:02 bastion LinuxCommandsWazuh: User aman [3191062]: 560 clear Nov 10 15:45:26 bastion LinuxCommandsWazuh: User aman [3191062]: 560 clear Nov 10 15:47:24 bastion LinuxCommandsWazuh: User aman [3191062]: 561 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 15:47:27 bastion LinuxCommandsWazuh: User aman [3191062]: 562 cl;ear Nov 10 15:47:28 bastion LinuxCommandsWazuh: User aman [3191062]: 563 clear Nov 10 15:48:16 bastion LinuxCommandsWazuh: User anam [3262907]: 178 sudo su ubuntu Nov 10 15:48:17 bastion LinuxCommandsWazuh: User anam [3262907]: 179 cat /etc/passwd Nov 10 15:49:03 bastion LinuxCommandsWazuh: User anam [3262907]: 180 pwd Nov 10 15:49:09 bastion LinuxCommandsWazuh: User anam [3262907]: 181 cat .bashrc Nov 10 15:50:20 bastion LinuxCommandsWazuh: User anam [3262907]: 182 nano .bashrc Nov 10 15:50:46 bastion LinuxCommandsWazuh: User akansha [3330383]: 11 exit Nov 10 15:50:48 bastion LinuxCommandsWazuh: User akansha [3330383]: 12 cd Nov 10 15:51:40 bastion LinuxCommandsWazuh: User akansha [3330383]: 13 nano .bashrc Nov 10 15:51:48 bastion LinuxCommandsWazuh: User akansha [3330383]: 14 source .bashrc Nov 10 15:51:56 bastion LinuxCommandsWazuh: User anam [3332549]: 175 sudo su ubuntu Nov 10 15:52:01 bastion LinuxCommandsWazuh: User anam [3332549]: 176 cd Nov 10 15:52:11 bastion LinuxCommandsWazuh: User anam [3332549]: 177 nano .bashrc Nov 10 15:52:18 bastion LinuxCommandsWazuh: User anam [3332549]: 178 source .bashrc Nov 10 15:52:49 bastion LinuxCommandsWazuh: User ankur [3334163]: 503 byobu Nov 10 15:52:51 bastion LinuxCommandsWazuh: User ankur [3334163]: 504 cd Nov 10 15:53:20 bastion LinuxCommandsWazuh: User sarthak.s [3335219]: 43 zodiac-ssh Nov 10 15:53:32 bastion LinuxCommandsWazuh: User ankur [3334163]: 505 nano .bashrc Nov 10 15:53:53 bastion LinuxCommandsWazuh: User ankur [3334163]: 506 source .bashrc Nov 10 15:54:46 bastion LinuxCommandsWazuh: User rihan [4058123]: 1434 mongo Nov 10 15:54:48 bastion LinuxCommandsWazuh: User rihan [3544648]: 1432 mongo Nov 10 15:54:51 bastion LinuxCommandsWazuh: User rihan [1387460]: 1444 mongo Nov 10 15:54:53 bastion LinuxCommandsWazuh: User rihan [356551]: 1440 mongo Nov 10 15:54:55 bastion LinuxCommandsWazuh: User rihan [1020056]: 1443 redis Nov 10 15:54:56 bastion LinuxCommandsWazuh: User rihan [1923180]: 1457 mongo Nov 10 15:55:00 bastion LinuxCommandsWazuh: User ubuntu [4153015]: 2000 cool-server Nov 10 15:55:01 bastion LinuxCommandsWazuh: User rihan [3925531]: 1471 sudo su ubuntu Nov 10 15:55:02 bastion LinuxCommandsWazuh: User rihan [3313594]: 1495 byobu Nov 10 15:56:06 bastion LinuxCommandsWazuh: User ankur [3334163]: 507 sudo su nikhil-garg Nov 10 15:56:16 bastion LinuxCommandsWazuh: User ankur [3334163]: 508 sudo su anam Nov 10 15:56:17 bastion LinuxCommandsWazuh: User anam [3332549]: 179 sudo su ankur Nov 10 15:56:25 bastion LinuxCommandsWazuh: User anam [3332549]: 180 sudo su nikhil-garg Nov 10 15:56:39 bastion LinuxCommandsWazuh: User anam [3332549]: 181 sudo su nikhil-solanki Nov 10 15:56:43 bastion LinuxCommandsWazuh: User rihan [3313594]: 1496 mongo Nov 10 15:56:46 bastion LinuxCommandsWazuh: User rihan [3340610]: 1504 sudo su ubuntu Nov 10 15:56:49 bastion LinuxCommandsWazuh: User akansha [3330383]: 15 sudo su anam Nov 10 15:56:51 bastion LinuxCommandsWazuh: User anam [3262907]: 183 sudo su akansha Nov 10 15:59:34 bastion LinuxCommandsWazuh: User rihan [3345863]: 1504 sudo su ubuntu Nov 10 16:02:35 bastion LinuxCommandsWazuh: User rihan [3351514]: 1504 sudo su ubuntu Nov 10 16:02:39 bastion LinuxCommandsWazuh: User rihan [3313594]: 1497 byobu Nov 10 16:04:40 bastion LinuxCommandsWazuh: User aman [3353581]: 564 exit Nov 10 16:04:54 bastion LinuxCommandsWazuh: User aman [3353581]: 565 kubectl get pods | grep chatbot Nov 10 16:07:14 bastion LinuxCommandsWazuh: User aman [3353581]: 566 kubectl logs -f chatbot-9ffdf4966-kmt2z Nov 10 16:07:14 bastion LinuxCommandsWazuh: User aman [3353581]: 566 kubectl logs -f chatbot-9ffdf4966-kmt2z Nov 10 16:07:15 bastion LinuxCommandsWazuh: User aman [3353581]: 567 clear Nov 10 16:09:21 bastion LinuxCommandsWazuh: User abhijeet [3358613]: 1998 kubectl get pods -n loki Nov 10 16:12:39 bastion LinuxCommandsWazuh: User sarthak.s [3361948]: 43 zodiac-ssh Nov 10 16:21:02 bastion LinuxCommandsWazuh: User ashish [3370586]: 874 kubectl get pods Nov 10 16:21:05 bastion LinuxCommandsWazuh: User ashish [3370586]: 874 kubectl get pods Nov 10 16:23:37 bastion LinuxCommandsWazuh: User ashish [3370586]: 874 kubectl get pods Nov 10 16:24:04 bastion LinuxCommandsWazuh: User ashish [3370586]: 874 kubectl get pods Nov 10 16:55:57 bastion LinuxCommandsWazuh: User aman [3353581]: 568 mongo pixel_v1 Nov 10 16:55:58 bastion LinuxCommandsWazuh: User aman [3353581]: 569 clear Nov 10 17:03:40 bastion LinuxCommandsWazuh: User ashish [3412876]: 874 kubectl get pods Nov 10 17:05:46 bastion LinuxCommandsWazuh: User ashish [3412876]: 874 kubectl get pods Nov 10 17:05:47 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3412876]: 874 kubectl get pods] Nov 10 17:17:31 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 748 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 10 17:17:39 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 748 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 10 17:17:39 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 748 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 10 17:26:18 bastion LinuxCommandsWazuh: User aman [3420502]: 570 exit Nov 10 17:26:28 bastion LinuxCommandsWazuh: User aman [3420502]: 571 exirt Nov 10 17:27:51 bastion LinuxCommandsWazuh: User aman [3420694]: 572 exit Nov 10 17:28:31 bastion LinuxCommandsWazuh: User ubuntu [3420811]: 2000 exit Nov 10 17:28:31 bastion LinuxCommandsWazuh: User ubuntu [3420811]: 2001 ls Nov 10 17:29:15 bastion LinuxCommandsWazuh: User aman [3420966]: 572 exit Nov 10 17:29:16 bastion LinuxCommandsWazuh: User aman [3420966]: 573 clear Nov 10 17:29:38 bastion LinuxCommandsWazuh: User aman [3420966]: 574 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 17:29:53 bastion LinuxCommandsWazuh: User aman [3420966]: 575 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 17:29:54 bastion LinuxCommandsWazuh: User aman [3420966]: 576 clear Nov 10 17:30:05 bastion LinuxCommandsWazuh: User aman [3420966]: 577 kubectl get pods | grep chatbot Nov 10 17:30:40 bastion LinuxCommandsWazuh: User aman [3420966]: 578 kubectl logs -f chatbot-9ffdf4966-kmt2z Nov 10 17:30:40 bastion LinuxCommandsWazuh: User aman [3420966]: 578 kubectl logs -f chatbot-9ffdf4966-kmt2z Nov 10 17:30:41 bastion LinuxCommandsWazuh: User aman [3420966]: 579 clear Nov 10 17:44:59 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 749 psql Nov 10 17:45:01 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 750 clear Nov 10 17:49:30 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 751 stern vortex Nov 10 17:49:31 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 751 stern vortex Nov 10 17:53:12 bastion LinuxCommandsWazuh: User mohtashim [3195000]: 752 mongo pixel_v1 Nov 10 17:53:57 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 307 vim Makefile Nov 10 17:53:57 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 307 vim Makefile Nov 10 17:53:57 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 307 vim Makefile Nov 10 17:53:59 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ping-pong [3255186]: 307 vim Makefile ] Nov 10 17:53:59 bastion LinuxCommandsWazuh: User ping-pong [3255186]: 307 vim Makefile Nov 10 17:53:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [3255186]: 307 vim Makefile ] Nov 10 18:07:57 bastion LinuxCommandsWazuh: User aman [3425682]: 580 exit Nov 10 18:14:53 bastion LinuxCommandsWazuh: User aman [3426023]: 580 exit Nov 10 18:15:34 bastion LinuxCommandsWazuh: User aman [3426023]: 581 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 10 18:16:29 bastion LinuxCommandsWazuh: User aman [3426023]: 582 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 18:16:30 bastion LinuxCommandsWazuh: User aman [3426023]: 583 clear Nov 10 18:24:08 bastion LinuxCommandsWazuh: User aman [3426023]: 584 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 18:24:09 bastion LinuxCommandsWazuh: User aman [3426023]: 585 clear Nov 10 18:34:31 bastion LinuxCommandsWazuh: User aman [3426023]: 586 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 10 18:34:32 bastion LinuxCommandsWazuh: User aman [3426023]: 587 clear Nov 10 19:01:17 bastion LinuxCommandsWazuh: User rihan [3431234]: 1504 sudo su ubuntu Nov 10 19:33:38 bastion LinuxCommandsWazuh: User mohtashim [3464002]: 753 exit Nov 10 19:34:38 bastion LinuxCommandsWazuh: User mohtashim [3464002]: 754 mongo pixel_v1 Nov 10 19:34:41 bastion LinuxCommandsWazuh: User mohtashim [3465029]: 753 exit