Nov 12 00:00:17 bastion LinuxCommandsWazuh: User ankur [719821]: 515 exit Nov 12 00:01:48 bastion LinuxCommandsWazuh: User ankur [2727474]: 501 clickhouse-ssh Nov 12 01:12:02 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 12 10:44:10 bastion LinuxCommandsWazuh: User saurav [848602]: 32 zodiac-server Nov 12 10:44:11 bastion LinuxCommandsWazuh: User saurav [848602]: 33 ls Nov 12 10:47:15 bastion LinuxCommandsWazuh: User saurav [849397]: 34 zodiac-server Nov 12 10:49:24 bastion LinuxCommandsWazuh: User saurav [849397]: 34 zodiac-server Nov 12 11:26:39 bastion LinuxCommandsWazuh: User ankur [853009]: 518 byobu Nov 12 11:29:56 bastion LinuxCommandsWazuh: User ankur [853009]: 518 byobu Nov 12 11:38:46 bastion LinuxCommandsWazuh: User ankur [857169]: 519 exit Nov 12 11:51:04 bastion LinuxCommandsWazuh: User rihan [512235]: 1525 kubectl get pods | grep nitrox Nov 12 11:51:04 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [512235]: 1525 kubectl get pods | grep nitrox] Nov 12 11:57:06 bastion LinuxCommandsWazuh: User aman [875425]: 639 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 12 11:57:08 bastion LinuxCommandsWazuh: User aman [875425]: 640 clear Nov 12 11:57:17 bastion LinuxCommandsWazuh: User aman [875425]: 641 kubectl get pods | grep chatbot Nov 12 11:57:57 bastion LinuxCommandsWazuh: User aman [875425]: 642 kubectl logs -f chatbot-77489cfcf4-gqldw Nov 12 11:57:58 bastion LinuxCommandsWazuh: User aman [875425]: 642 kubectl logs -f chatbot-77489cfcf4-gqldw Nov 12 11:57:59 bastion LinuxCommandsWazuh: User aman [875425]: 643 clear Nov 12 11:58:20 bastion LinuxCommandsWazuh: User saurav [876751]: 35 exit Nov 12 12:08:48 bastion LinuxCommandsWazuh: User abhijeet [887365]: 1998 internal-server Nov 12 12:08:49 bastion LinuxCommandsWazuh: User abhijeet [887365]: 1999 ls Nov 12 12:08:57 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2000 kubectl --version Nov 12 12:09:07 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2001 kubectl config --help Nov 12 12:09:31 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2002 kubectl config view Nov 12 12:09:57 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2003 kubectl --help Nov 12 12:10:07 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2004 kubectl version Nov 12 12:13:19 bastion LinuxCommandsWazuh: User ashish [891907]: 883 byobu Nov 12 12:13:20 bastion LinuxCommandsWazuh: User ashish [891907]: 883 byobu Nov 12 12:13:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [891907]: 883 byobu] Nov 12 12:19:29 bastion LinuxCommandsWazuh: User ankur [857169]: 520 byobu Nov 12 12:26:15 bastion LinuxCommandsWazuh: User ashish [909559]: 883 byobu Nov 12 12:32:10 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2005 ls Nov 12 12:32:24 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2006 kubectl get pods -o wide | grep xlr Nov 12 12:32:41 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2007 kubectl get pods -o wide | grep sbart Nov 12 12:32:45 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2008 kubectl get pods -o wide | grep bart Nov 12 12:32:48 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2009 kubectl get pods -o wide | grep brt Nov 12 12:32:51 bastion LinuxCommandsWazuh: User ashish [916013]: 883 byobu Nov 12 12:32:52 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2010 kubectl get pods -o wide | grep sb Nov 12 12:33:08 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2010 kubectl get pods -o wide | grep sb Nov 12 12:33:19 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2011 kubectl top node gke-nitrox-productio-miscellaneous-on-3abe177f-9fcf Nov 12 12:33:30 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2011 kubectl top node gke-nitrox-productio-miscellaneous-on-3abe177f-9fcf Nov 12 12:33:32 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2012 kubectl get pods -o wide | grep sb Nov 12 12:33:53 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2013 kubectl get deployment Nov 12 12:34:16 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2014 kubectl rollout restart deployment sbert-classifier Nov 12 12:36:20 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2015 kubectl get pods -o wide --watch| grep sber Nov 12 12:36:28 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2015 kubectl get pods -o wide --watch| grep sber Nov 12 12:36:54 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2016 kubectl delete pod sbert-classifier-7fc7d9c968-2tpxz sbert-classifier-7fc7d9c968-j9lwh sbert-classifier-7fc7d9c968-qv6mp sbert-classifier-7fc7d9c968-sdrlp Nov 12 12:37:05 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2017 kubectl get pods -o wide --watch| grep sber Nov 12 12:37:14 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2017 kubectl get pods -o wide --watch| grep sber Nov 12 12:37:23 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2017 kubectl get pods -o wide --watch| grep sber Nov 12 12:48:27 bastion LinuxCommandsWazuh: User abhijeet [887365]: 2018 ls Nov 12 13:08:02 bastion LinuxCommandsWazuh: User abhijeet [951450]: 1998 internal-server Nov 12 13:18:55 bastion LinuxCommandsWazuh: User ayush [962233]: 609 byobu Nov 12 13:22:20 bastion LinuxCommandsWazuh: User anam [968760]: 219 vpn-server Nov 12 13:23:49 bastion LinuxCommandsWazuh: User ayush [962233]: 609 byobu Nov 12 13:23:50 bastion LinuxCommandsWazuh: User ayush [962233]: 609 byobu Nov 12 13:25:15 bastion LinuxCommandsWazuh: User ayush [972903]: 609 byobu Nov 12 13:25:20 bastion LinuxCommandsWazuh: User abhijeet [951450]: 1998 internal-server Nov 12 13:25:26 bastion LinuxCommandsWazuh: User abhijeet [951450]: 1999 kubectl get pods | grep data Nov 12 13:29:48 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2000 kubectl get namespace Nov 12 13:30:02 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2001 kubectl get pod -n kube-system Nov 12 14:03:51 bastion LinuxCommandsWazuh: User mohtashim [1045755]: 798 exit Nov 12 14:04:33 bastion LinuxCommandsWazuh: User mohtashim [1045755]: 799 mongo pixel_v1 Nov 12 14:04:33 bastion LinuxCommandsWazuh: User mohtashim [1045755]: 799 mongo pixel_v1 Nov 12 14:05:27 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2002 kubectl get pod -n kube-systemw Nov 12 14:05:33 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2003 kubectl get pod -n kube-system\ Nov 12 14:08:32 bastion LinuxCommandsWazuh: User mohtashim [1045755]: 799 mongo pixel_v1 Nov 12 14:20:09 bastion LinuxCommandsWazuh: User rihan [1065085]: 1525 kubectl get pods | grep nitrox Nov 12 14:20:32 bastion LinuxCommandsWazuh: User rihan [3340610]: 1505 mongo Nov 12 14:25:53 bastion LinuxCommandsWazuh: User rihan [1076520]: 1526 mongo Nov 12 14:28:32 bastion LinuxCommandsWazuh: User rihan [1081295]: 1526 mongo Nov 12 14:50:22 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2004 kubectl get pods | grep data Nov 12 14:50:34 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2005 kubectl logs datapulse-web-75bbf69797-wqlqw -f Nov 12 14:50:40 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2006 kubectl get pods | grep data Nov 12 14:51:02 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2007 kubectl get pods -o wide| grep data Nov 12 14:51:26 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2008 kubectl get deployment Nov 12 14:51:47 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2009 kubectl rollout restart deploymen datapulse-web Nov 12 14:51:51 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2010 kubectl rollout restart deployment datapulse-web Nov 12 14:51:54 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2011 kubectl get pods -o wide| grep data Nov 12 14:52:04 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [951450]: 2011 kubectl get pods -o wide| grep data] Nov 12 14:52:30 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2012 kubectl delete pod datapulse-web-75bbf69797-wqlqw datapulse-web-75bbf69797-vpz4k datapulse-web-75bbf69797-th8z8 datapulse-web-75bbf69797-9m2x4 datapulse-web-75bbf69797-66bsf Nov 12 14:52:31 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2013 kubectl get pods -o wide| grep data Nov 12 14:52:44 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2014 kubectl delete pod datapulse-web-75bbf69797-cbml9 Nov 12 14:52:46 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2015 kubectl get pods -o wide| grep data Nov 12 14:52:52 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2015 kubectl get pods -o wide| grep data Nov 12 14:52:53 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2015 kubectl get pods -o wide| grep data Nov 12 14:52:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [951450]: 2015 kubectl get pods -o wide| grep data] Nov 12 14:53:11 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2015 kubectl get pods -o wide| grep data Nov 12 14:53:26 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2016 kubectl describe pod datapulse-web-75bbf69797-q2qtg Nov 12 14:53:49 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2017 kubectl get pods -o wide| grep data Nov 12 14:53:59 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2017 kubectl get pods -o wide| grep data Nov 12 14:54:14 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2018 kubectl describe pod datapulse-web-75bbf69797-2cf9b Nov 12 14:54:36 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2019 kubectl get pods -o wide| grep data Nov 12 14:55:00 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2020 kubectl top node | grep data Nov 12 14:57:12 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2020 kubectl top node | grep data Nov 12 14:57:14 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2021 kubectl get pods -o wide| grep data Nov 12 14:57:19 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2021 kubectl get pods -o wide| grep data Nov 12 14:57:21 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2021 kubectl get pods -o wide| grep data Nov 12 14:57:34 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2022 kubectl get deployment Nov 12 14:58:06 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2023 kubectl rollout restart deployment datapulse-web datapulse-celery Nov 12 14:58:07 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2024 kubectl get deployment Nov 12 14:58:11 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2025 kubectl get pods -o wide| grep data Nov 12 14:58:19 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [951450]: 2025 kubectl get pods -o wide| grep data] Nov 12 14:58:24 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2026 kubectl top node | grep data Nov 12 14:58:28 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2027 kubectl get pods -o wide| grep data Nov 12 14:58:40 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [951450]: 2027 kubectl get pods -o wide| grep data] Nov 12 14:58:42 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2028 kubectl top node | grep data Nov 12 14:58:46 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 14:58:49 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 14:59:13 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 14:59:21 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 15:00:09 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 15:00:11 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 15:00:13 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data Nov 12 15:00:16 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [951450]: 2029 kubectl get pods -o wide| grep data] Nov 12 15:02:47 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2030 kubectl get pods -o wide --watch| grep data Nov 12 15:02:57 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2031 kubectl get pods -o wide | grep data Nov 12 15:03:04 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2031 kubectl get pods -o wide | grep data Nov 12 15:03:15 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [951450]: 2031 kubectl get pods -o wide | grep data] Nov 12 15:03:24 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2032 kubectl top node | grep data Nov 12 15:03:27 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data Nov 12 15:03:37 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data] Nov 12 15:03:39 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data Nov 12 15:03:41 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data Nov 12 15:11:11 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data Nov 12 15:11:14 bastion LinuxCommandsWazuh: User abhijeet [951450]: 2033 kubectl get pods -o wide | grep data Nov 12 15:12:58 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 1998 exit Nov 12 15:13:12 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 1999 kubectl get pods -n loki Nov 12 15:23:42 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2000 kubectl get pods -n loki --watch Nov 12 15:23:46 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2001 kubectl get pods -n loki Nov 12 15:24:09 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2001 kubectl get pods -n loki Nov 12 15:24:18 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2002 kubectl get pods -n loki -o wide Nov 12 15:24:32 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2002 kubectl get pods -n loki -o wide Nov 12 15:24:45 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2002 kubectl get pods -n loki -o wide Nov 12 15:25:29 bastion LinuxCommandsWazuh: User abhijeet [1166052]: 2002 kubectl get pods -n loki -o wide Nov 12 15:48:31 bastion LinuxCommandsWazuh: User mohtashim [1233884]: 799 mongo pixel_v1 Nov 12 15:48:33 bastion LinuxCommandsWazuh: User mohtashim [1233884]: 800 clear Nov 12 15:48:36 bastion LinuxCommandsWazuh: User mohtashim [1233884]: 800 clear Nov 12 15:52:21 bastion LinuxCommandsWazuh: User mohtashim [1233884]: 801 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 12 15:54:57 bastion LinuxCommandsWazuh: User ashish [1245720]: 883 byobu Nov 12 15:55:05 bastion LinuxCommandsWazuh: User ashish [366978]: 880 clickhouse-ssh Nov 12 15:55:08 bastion LinuxCommandsWazuh: User ashish [366978]: 881 clear Nov 12 15:55:46 bastion LinuxCommandsWazuh: User ashish [366978]: 882 redis Nov 12 15:55:50 bastion LinuxCommandsWazuh: User ashish [483697]: 887 mongo pixel_v1; Nov 12 15:56:06 bastion LinuxCommandsWazuh: User aman [1249662]: 644 exit Nov 12 16:13:00 bastion LinuxCommandsWazuh: User ashish [483697]: 888 redis Nov 12 16:13:01 bastion LinuxCommandsWazuh: User ashish [1245720]: 883 byobu Nov 12 16:24:07 bastion LinuxCommandsWazuh: User aman [1249662]: 645 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 12 16:24:10 bastion LinuxCommandsWazuh: User aman [1249662]: 646 clear Nov 12 16:43:34 bastion LinuxCommandsWazuh: User anam [1354079]: 219 vpn-server Nov 12 16:43:40 bastion LinuxCommandsWazuh: User anam [1354079]: 220 ls Nov 12 16:45:23 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 802 exit Nov 12 16:45:26 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 803 cd Nov 12 16:45:29 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 804 ls Nov 12 16:46:45 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 805 cd ~/.ssh Nov 12 16:46:46 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 806 ls Nov 12 16:47:46 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 807 nano authorized_keys Nov 12 16:47:50 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 808 cat authorized_keys Nov 12 16:50:42 bastion LinuxCommandsWazuh: User mohtashim [1357999]: 809 cd Nov 12 16:50:50 bastion LinuxCommandsWazuh: User anam [1354079]: 221 sudo su mohtashim Nov 12 16:53:08 bastion LinuxCommandsWazuh: User mohtashim [1372196]: 810 exit Nov 12 16:59:28 bastion LinuxCommandsWazuh: User mohtashim [1384313]: 810 exit Nov 12 17:01:14 bastion LinuxCommandsWazuh: User aman [1387758]: 647 exit Nov 12 17:01:17 bastion LinuxCommandsWazuh: User abhijeet [1387960]: 1998 exit Nov 12 17:01:22 bastion LinuxCommandsWazuh: User anam [1354079]: 222 vpn-server Nov 12 17:01:31 bastion LinuxCommandsWazuh: User anam [1354079]: 223 ls Nov 12 17:01:42 bastion LinuxCommandsWazuh: User aman [1387758]: 648 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 12 17:02:03 bastion LinuxCommandsWazuh: User mohtashim [1389465]: 810 exit Nov 12 17:02:31 bastion LinuxCommandsWazuh: User mohtashim [1390459]: 810 exit Nov 12 17:04:58 bastion LinuxCommandsWazuh: User aman [1387758]: 649 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 12 17:05:00 bastion LinuxCommandsWazuh: User aman [1387758]: 650 clear Nov 12 17:10:56 bastion LinuxCommandsWazuh: User anam [1406597]: 219 vpn-server Nov 12 17:10:57 bastion LinuxCommandsWazuh: User anam [1406597]: 220 cd Nov 12 17:11:41 bastion LinuxCommandsWazuh: User anam [1406597]: 221 lks Nov 12 17:11:51 bastion LinuxCommandsWazuh: User anam [1406597]: 222 cat .ssh/id_rsa.pub Nov 12 17:12:25 bastion LinuxCommandsWazuh: User anam [1406597]: 223 ssh ubuntu@ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDile3sjoGt3l51gkxoUPEBb6YHPN1UG5VFtdclIrTDnhr80lbXBpPS/gxzUMhj1sQ8F50Zq5CUpcP6UHV6E5vGCnX/KAm9Zvpbf6QphnU8BsD3LAex6uRq15eGoaXFl4h4QgLtyrBLaWVcZvEH+Slahxn78JBzJ/kn3iH0WapayZUJlw2v5bxQhFKpmBUYk27/m7YqNQF7b1HkLLJeVoQu+HTQthOf6neNa+YQb+5WxJ7b0j+A/0IHut3QOJR0nwN706VeO8vF7TJssV/Qd+NgiAGqdUcb16mIko8041HCZjkRsf6hjpJj+eOGZEQL41sKCPwjqHW+ceuCKn91CJV49jRmv+lT8de6VyD0QtY0cQNaHGutGmRtq9eY5BNB+QjSmOVPPU9le8DjrAmYUMBrzw59LCffFni+FVhUBmC5p37Sd5Xjtjve7nZPUKHu3NkM52YCOi5Ubt0hLu3EqpGurMeeKIgOnbYjNgVpKIampanQLEciPqNXW1t9MzZ1v6E= anam@bastion Nov 12 17:12:43 bastion LinuxCommandsWazuh: User anam [1406597]: 224 ssh ubuntu@34.131.126.168 Nov 12 17:12:44 bastion LinuxCommandsWazuh: User anam [1406597]: 225 ls Nov 12 17:13:18 bastion LinuxCommandsWazuh: User anam [1406597]: 226 vim .bashrc Nov 12 17:13:24 bastion LinuxCommandsWazuh: User anam [1406597]: 227 source .bashrc Nov 12 17:13:29 bastion LinuxCommandsWazuh: User anam [1406597]: 228 stage-ssh Nov 12 17:13:30 bastion LinuxCommandsWazuh: User abhijeet [1387960]: 1999 sudo su anam Nov 12 17:13:35 bastion LinuxCommandsWazuh: User anam [1354079]: 224 stage Nov 12 17:13:45 bastion LinuxCommandsWazuh: User anam [1354079]: 225 ls Nov 12 17:13:57 bastion LinuxCommandsWazuh: User anam [1354079]: 226 stage-ssh Nov 12 17:14:27 bastion LinuxCommandsWazuh: User anam [1413195]: 237 exit Nov 12 17:18:35 bastion LinuxCommandsWazuh: User anam [1413195]: 238 stage-ssh Nov 12 17:18:45 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2000 cat cpu_and_memory.sh Nov 12 17:18:46 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2001 cd Nov 12 17:18:52 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2002 cd ~/.ssh Nov 12 17:18:53 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2003 ls Nov 12 17:19:34 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2004 cd Nov 12 17:19:46 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 810 exit Nov 12 17:19:48 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 811 cd Nov 12 17:19:54 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 812 ssh key-gen Nov 12 17:20:12 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 813 cd ~/.ssh Nov 12 17:20:15 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 814 ls Nov 12 17:20:35 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 815 cat id_rsa.p Nov 12 17:20:37 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 816 cat id_rsa.pub Nov 12 17:21:16 bastion LinuxCommandsWazuh: User anam [1426751]: 237 exit Nov 12 17:21:31 bastion LinuxCommandsWazuh: User abhijeet [1427304]: 1998 exit Nov 12 17:23:40 bastion LinuxCommandsWazuh: User anam [1426751]: 238 stage-ssh Nov 12 17:23:51 bastion LinuxCommandsWazuh: User anam [1426751]: 239 cat .bashrc Nov 12 17:23:58 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 817 cd Nov 12 17:24:09 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 818 sudo nano .bashrc Nov 12 17:24:33 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 819 nano .bashrc Nov 12 17:24:52 bastion LinuxCommandsWazuh: User mohtashim [1433494]: 810 exit Nov 12 17:24:54 bastion LinuxCommandsWazuh: User mohtashim [1423743]: 820 source .bashrc Nov 12 17:25:06 bastion LinuxCommandsWazuh: User mohtashim [1433494]: 811 stage-ssh Nov 12 17:32:33 bastion LinuxCommandsWazuh: User ashish [1448306]: 892 redis Nov 12 17:40:49 bastion LinuxCommandsWazuh: User ubuntu [1421873]: 2005 sudo su mohtashim Nov 12 17:59:36 bastion LinuxCommandsWazuh: User ashish [1448306]: 892 redis Nov 12 18:52:55 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 1998 exit Nov 12 18:53:02 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 1999 kubectl get ingress Nov 12 18:53:15 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2000 kubectl get ingress nitrox-production -o yaml Nov 12 18:53:35 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2001 kubectl get ingress Nov 12 18:56:07 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2002 kubectl describe ingress nitrox-production Nov 12 18:56:12 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2003 kubectl describe Nov 12 18:56:35 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2004 kubectl describe ingress nitrox-production Nov 12 18:57:22 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2005 kubectl get ingress nitrox-production -o yaml Nov 12 19:06:27 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2006 kubectl get pods -o wide -n kube-system Nov 12 19:06:48 bastion LinuxCommandsWazuh: User abhijeet [1600817]: 2007 kubectl get pods -o wide -n kube-system | grep core Nov 12 19:22:58 bastion LinuxCommandsWazuh: User mohtashim [1657763]: 822 source .bashrc Nov 12 19:22:59 bastion LinuxCommandsWazuh: User mohtashim [1657763]: 823 clear Nov 12 19:25:03 bastion LinuxCommandsWazuh: User mohtashim [1657763]: 824 psql Nov 12 19:25:07 bastion LinuxCommandsWazuh: User ashish [1661791]: 892 redis Nov 12 19:25:09 bastion LinuxCommandsWazuh: User ashish [1661911]: 892 redis Nov 12 19:25:16 bastion LinuxCommandsWazuh: User ashish [1661911]: 893 kubectl get pods Nov 12 19:41:02 bastion LinuxCommandsWazuh: User ashish [1704175]: 893 byobu Nov 12 19:41:13 bastion LinuxCommandsWazuh: User ashish [1704175]: 893 byobu Nov 12 19:41:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1704175]: 893 byobu] Nov 12 22:13:55 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 824 psql Nov 12 22:13:56 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 825 clear Nov 12 22:14:04 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 826 k get pods | grep "vortex" Nov 12 22:22:41 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 827 stern vortex-fc9bdb5cc Nov 12 22:22:42 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 828 clear Nov 12 22:22:44 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 829 k get pods | grep "vortex" Nov 12 22:22:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1900340]: 829 k get pods | grep "vortex"] Nov 12 22:22:55 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 830 clear Nov 12 22:23:14 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 831 stern vortex-5f575fcbc5 Nov 12 22:23:16 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 832 k get pods | grep "vortex" Nov 12 22:23:20 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [1900340]: 832 k get pods | grep "vortex"] Nov 12 22:23:21 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 832 k get pods | grep "vortex" Nov 12 22:23:24 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 832 k get pods | grep "vortex" Nov 12 22:23:29 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 833 clear Nov 12 22:23:30 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 834 k get pods | grep "vortex" Nov 12 22:24:43 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 835 stern vortex-5f575fcbc5 Nov 12 22:24:43 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1900340]: 835 stern vortex-5f575fcbc5] Nov 12 22:24:45 bastion LinuxCommandsWazuh: User mohtashim [1900340]: 836 clear