Nov 13 00:35:19 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 1998 k Nov 13 00:35:27 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 1999 kubectl get nodes Nov 13 00:35:43 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2000 kubectl describe node gke-nitrox-productio-application-spot-ba402656-59lr Nov 13 00:36:06 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2001 kubectl get nodes Nov 13 00:36:26 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2002 kubectl describe node gke-nitrox-productio-cookie-cutter-sp-bd3b9116-2g6n Nov 13 00:41:17 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2003 ls Nov 13 00:41:26 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2004 kubectl describe node gke-nitrox-productio-cookie-cutter-sp-bd3b9116-2g6n | grep tain Nov 13 00:41:29 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2005 kubectl describe node gke-nitrox-productio-cookie-cutter-sp-bd3b9116-2g6n | grep taint Nov 13 00:41:43 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2006 kubectl describe node gke-nitrox-productio-cookie-cutter-sp-bd3b9116-2g6n | grep teint Nov 13 01:01:39 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2007 kubectl top pod Nov 13 01:08:41 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2008 kubectl get ingress Nov 13 01:08:59 bastion LinuxCommandsWazuh: User abhijeet [2040674]: 2009 kubectl get ingress nitrox-production -o yaml Nov 13 11:40:19 bastion LinuxCommandsWazuh: User ashish [2700106]: 893 byobu Nov 13 11:40:26 bastion LinuxCommandsWazuh: User ashish [2700106]: 894 clickhouse-ssh Nov 13 11:42:03 bastion LinuxCommandsWazuh: User ashish [2703338]: 893 byobu Nov 13 11:42:10 bastion LinuxCommandsWazuh: User ashish [1661911]: 894 clickhouse-ssh Nov 13 11:42:10 bastion LinuxCommandsWazuh: User ashish [2700106]: 895 byobu Nov 13 11:42:10 bastion LinuxCommandsWazuh: User ashish [2703338]: 893 byobu Nov 13 11:42:17 bastion LinuxCommandsWazuh: User ashish [2700106]: 895 byobu Nov 13 11:42:18 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2700106]: 895 byobu] Nov 13 11:42:20 bastion LinuxCommandsWazuh: User ashish [2703927]: 894 clickhouse-ssh Nov 13 11:42:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [2703927]: 894 clickhouse-ssh] Nov 13 11:42:28 bastion LinuxCommandsWazuh: User ashish [2704236]: 894 clickhouse-ssh Nov 13 11:42:56 bastion LinuxCommandsWazuh: User ashish [2703927]: 894 clickhouse-ssh Nov 13 11:42:56 bastion LinuxCommandsWazuh: User ashish [2703927]: 894 clickhouse-ssh Nov 13 11:55:05 bastion LinuxCommandsWazuh: User rihan [2727788]: 1526 mongo Nov 13 12:08:31 bastion LinuxCommandsWazuh: User ankur [2753767]: 521 exit Nov 13 12:19:05 bastion LinuxCommandsWazuh: User ashish [2783373]: 894 clickhouse-ssh Nov 13 12:19:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2783373]: 894 clickhouse-ssh] Nov 13 12:20:55 bastion LinuxCommandsWazuh: User abhijeet [2787403]: 1998 kubectl get ingress nitrox-production -o yaml Nov 13 12:21:16 bastion LinuxCommandsWazuh: User abhijeet [2788154]: 1998 kubectl get ingress nitrox-production -o yaml Nov 13 12:22:13 bastion LinuxCommandsWazuh: User abhijeet [2787403]: 1999 internal-server Nov 13 12:22:24 bastion LinuxCommandsWazuh: User abhijeet [2787403]: 2000 ip a | grep 10.190 Nov 13 12:45:05 bastion LinuxCommandsWazuh: User abhijeet [2818802]: 1998 exit Nov 13 12:45:06 bastion LinuxCommandsWazuh: User abhijeet [2818802]: 1999 l;s Nov 13 12:45:06 bastion LinuxCommandsWazuh: User abhijeet [2818802]: 1999 l;s Nov 13 12:46:15 bastion LinuxCommandsWazuh: User ashish [2820632]: 896 byobu Nov 13 13:04:39 bastion LinuxCommandsWazuh: User ankur [2854986]: 522 byobu Nov 13 13:05:28 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 13 13:08:05 bastion LinuxCommandsWazuh: User ankur [1703758]: 884 k get pods | grep house Nov 13 13:08:16 bastion LinuxCommandsWazuh: User ankur [1703758]: 885 k rollout restart deployment/house-of-click Nov 13 13:09:25 bastion LinuxCommandsWazuh: User ankur [1703758]: 886 stern house-of-click Nov 13 13:11:06 bastion LinuxCommandsWazuh: User ankur [1703758]: 887 k rollout restart deployment/house-of-click Nov 13 13:11:55 bastion LinuxCommandsWazuh: User ankur [1703758]: 888 stern house-of-click Nov 13 13:11:58 bastion LinuxCommandsWazuh: User ankur [1703758]: 889 k get pods | grep house Nov 13 13:12:27 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [1703758]: 889 k get pods | grep house] Nov 13 13:12:34 bastion LinuxCommandsWazuh: User ankur [1703758]: 890 k logs -f house-of-click-748c98bd76-nqzn6 Nov 13 13:12:38 bastion LinuxCommandsWazuh: User ankur [1703758]: 891 k logs house-of-click-748c98bd76-nqzn6 Nov 13 13:12:41 bastion LinuxCommandsWazuh: User ankur [1703758]: 892 k get pods | grep house Nov 13 13:12:42 bastion LinuxCommandsWazuh: User ankur [1703758]: 892 k get pods | grep house Nov 13 13:13:26 bastion LinuxCommandsWazuh: User ankur [1703758]: 893 k rollout restart deployment/house-of-click Nov 13 13:14:08 bastion LinuxCommandsWazuh: User ankur [1703758]: 894 k get pods | grep house Nov 13 13:14:15 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [1703758]: 894 k get pods | grep house] Nov 13 13:15:04 bastion LinuxCommandsWazuh: User ankur [1703758]: 894 k get pods | grep house Nov 13 13:16:00 bastion LinuxCommandsWazuh: User ankur [1703758]: 895 k logs house-of-click-576d667789-56sk9 | more Nov 13 13:16:00 bastion LinuxCommandsWazuh: User ankur [1703758]: 895 k logs house-of-click-576d667789-56sk9 | more Nov 13 13:23:30 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 1998 exit Nov 13 13:23:31 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 1999 ls Nov 13 13:38:55 bastion LinuxCommandsWazuh: User rihan [2946243]: 1526 mongo Nov 13 13:38:55 bastion LinuxCommandsWazuh: User rihan [2946262]: 1526 mongo Nov 13 13:40:38 bastion LinuxCommandsWazuh: User rihan [2949520]: 1526 mongo Nov 13 13:44:08 bastion LinuxCommandsWazuh: User mohtashim [2955946]: 837 exit Nov 13 13:44:10 bastion LinuxCommandsWazuh: User mohtashim [2955946]: 838 clear Nov 13 13:44:21 bastion LinuxCommandsWazuh: User mohtashim [2955946]: 839 stern vortex-5dcf76d889 Nov 13 13:44:21 bastion LinuxCommandsWazuh: User mohtashim [2955946]: 839 stern vortex-5dcf76d889 Nov 13 13:45:59 bastion LinuxCommandsWazuh: User mohtashim [2960026]: 837 exit Nov 13 13:47:35 bastion LinuxCommandsWazuh: User rihan [2962944]: 1526 mongo Nov 13 13:53:26 bastion LinuxCommandsWazuh: User abhijeet [2969374]: 1998 exit Nov 13 13:53:45 bastion LinuxCommandsWazuh: User abhijeet [2969374]: 1999 cat .bashrc Nov 13 13:53:52 bastion LinuxCommandsWazuh: User abhijeet [2969374]: 2000 cat .bashrc | grep redos Nov 13 13:53:53 bastion LinuxCommandsWazuh: User abhijeet [2969374]: 2001 cat .bashrc | grep redis Nov 13 13:57:31 bastion LinuxCommandsWazuh: User mohtashim [2955946]: 840 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 13 14:13:01 bastion LinuxCommandsWazuh: User ayush [2988963]: 609 byobu Nov 13 14:15:00 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2000 redis-ssh Nov 13 14:15:11 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2001 cat .bashrc | grep redis Nov 13 14:22:00 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2002 cat .bashrc | grep dra Nov 13 14:34:21 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2003 redis-cli -h gcp-redis.getnitro.co.in Nov 13 14:34:22 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2004 ls Nov 13 14:34:51 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2005 cat .bashrc | grep mong Nov 13 14:35:10 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2006 mongosh --host https://gcp-mongodb.getnitro.co.in/ Nov 13 14:35:10 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2006 mongosh --host https://gcp-mongodb.getnitro.co.in/ Nov 13 14:35:21 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2007 #mongosh --host gcp-mongodb.getnitro.co.in Nov 13 14:35:28 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2008 mongosh --help | grep user Nov 13 14:36:33 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2009 mongosh --host gcp-mongodb.getnitro.co.in -u mongodb Nov 13 14:38:37 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2010 mongosh --help Nov 13 14:44:09 bastion LinuxCommandsWazuh: User mohtashim [3047746]: 842 mongo pixel_v1 Nov 13 14:50:18 bastion LinuxCommandsWazuh: User mohtashim [3059720]: 842 mongo pixel_v1 Nov 13 14:50:50 bastion LinuxCommandsWazuh: User mohtashim [3047746]: 842 mongo pixel_v1 Nov 13 14:51:26 bastion LinuxCommandsWazuh: User mohtashim [3062478]: 842 mongo pixel_v1 Nov 13 14:53:58 bastion LinuxCommandsWazuh: User mohtashim [3047746]: 843 byobu Nov 13 14:54:04 bastion LinuxCommandsWazuh: User mohtashim [3059720]: 842 mongo pixel_v1 Nov 13 15:02:13 bastion LinuxCommandsWazuh: User abhijeet [2908325]: 2011 redis-cli -h gcp-redis.getnitro.co.in Nov 13 15:29:10 bastion LinuxCommandsWazuh: User ubuntu [3136673]: 2000 sudo su mohtashim Nov 13 15:29:13 bastion LinuxCommandsWazuh: User rihan [3136782]: 1526 mongo Nov 13 15:29:23 bastion LinuxCommandsWazuh: User rihan [3136782]: 1527 alias k=kubectl Nov 13 15:29:29 bastion LinuxCommandsWazuh: User rihan [3136782]: 1528 k get pods Nov 13 15:31:35 bastion LinuxCommandsWazuh: User ayush [2988963]: 609 byobu Nov 13 15:31:36 bastion LinuxCommandsWazuh: User ayush [2988963]: 609 byobu Nov 13 15:31:59 bastion LinuxCommandsWazuh: User rihan [3136782]: 1529 k Nov 13 15:32:00 bastion LinuxCommandsWazuh: message repeated 8 times: [ User rihan [3136782]: 1529 k ] Nov 13 15:32:00 bastion LinuxCommandsWazuh: User rihan [3136782]: 1530 ls Nov 13 15:32:02 bastion LinuxCommandsWazuh: User ubuntu [3136673]: 2001 sudo su rihan Nov 13 15:32:10 bastion LinuxCommandsWazuh: User ubuntu [3136673]: 2001 sudo su rihan Nov 13 15:32:10 bastion LinuxCommandsWazuh: User ubuntu [3136673]: 2001 sudo su rihan Nov 13 15:32:17 bastion LinuxCommandsWazuh: User ubuntu [3142118]: 2000 sudo su mohtashim Nov 13 15:32:18 bastion LinuxCommandsWazuh: User ubuntu [3142118]: 2001 ls Nov 13 15:32:21 bastion LinuxCommandsWazuh: User rihan [3142192]: 1531 exit Nov 13 15:32:22 bastion LinuxCommandsWazuh: User rihan [3142192]: 1532 cd Nov 13 15:32:22 bastion LinuxCommandsWazuh: User rihan [3142192]: 1533 ls Nov 13 15:32:30 bastion LinuxCommandsWazuh: User rihan [3142446]: 1531 exit Nov 13 15:32:33 bastion LinuxCommandsWazuh: User abhijeet [3142584]: 1998 exit Nov 13 15:32:34 bastion LinuxCommandsWazuh: User abhijeet [3142584]: 1999 ls Nov 13 15:32:40 bastion LinuxCommandsWazuh: User abhijeet [3142831]: 1998 exit Nov 13 15:32:48 bastion LinuxCommandsWazuh: User ubuntu [3143328]: 2000 sudo su mohtashim Nov 13 15:32:49 bastion LinuxCommandsWazuh: User ubuntu [3143328]: 2001 cd Nov 13 15:32:49 bastion LinuxCommandsWazuh: User ubuntu [3143328]: 2002 ls Nov 13 15:33:05 bastion LinuxCommandsWazuh: User abhijeet [3142831]: 1999 sudo su ubuntu Nov 13 15:33:07 bastion LinuxCommandsWazuh: User abhijeet [3142584]: 2000 byobu Nov 13 15:33:14 bastion LinuxCommandsWazuh: User abhijeet [3142584]: 2001 ssh ubuntu@vpn Nov 13 15:34:51 bastion LinuxCommandsWazuh: User rihan [2727788]: 1527 psql -U postgres -d vortex_v2 Nov 13 15:39:48 bastion LinuxCommandsWazuh: User rihan [3142192]: 1533 ls Nov 13 15:39:49 bastion LinuxCommandsWazuh: message repeated 4 times: [ User rihan [3142192]: 1533 ls] Nov 13 15:40:55 bastion LinuxCommandsWazuh: User rihan [3142192]: 1533 ls Nov 13 15:40:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [3142192]: 1533 ls] Nov 13 15:45:56 bastion LinuxCommandsWazuh: User ubuntu [3142118]: 2002 sudo su rihan Nov 13 16:01:28 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 1998 exit Nov 13 16:01:29 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 1999 ls Nov 13 16:02:13 bastion LinuxCommandsWazuh: User anam [3176753]: 241 sudo su ubuntu Nov 13 16:02:16 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2000 vim .ssh/authorized_keys Nov 13 16:02:18 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2001 lsc Nov 13 16:02:20 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2002 ls Nov 13 16:02:58 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2003 cat .ssh/authorized_keys Nov 13 16:04:22 bastion LinuxCommandsWazuh: User abhijeet [3178857]: 1998 exit Nov 13 16:04:37 bastion LinuxCommandsWazuh: User ubuntu [3179111]: 2000 exit Nov 13 16:04:38 bastion LinuxCommandsWazuh: User ubuntu [3179111]: 2001 cd Nov 13 16:05:00 bastion LinuxCommandsWazuh: User ubuntu [3179111]: 2002 vim .ssh/authorized_keys Nov 13 16:05:30 bastion LinuxCommandsWazuh: User ubuntu [3179111]: 2002 vim .ssh/authorized_keys Nov 13 16:05:33 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2004 sudo su ubuntu Nov 13 16:05:34 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2005 ls Nov 13 16:05:48 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2006 vim .ssh/authorized_keys Nov 13 16:05:53 bastion LinuxCommandsWazuh: User abhijeet [3175948]: 2007 ls Nov 13 16:05:57 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2000 exit Nov 13 16:05:58 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2001 cd Nov 13 16:05:58 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2002 ls Nov 13 16:06:14 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2003 vim .ssh/authorized_keys Nov 13 16:06:20 bastion LinuxCommandsWazuh: User ubuntu [3181743]: 2000 exit Nov 13 16:06:21 bastion LinuxCommandsWazuh: User ubuntu [3181743]: 2001 ls Nov 13 16:06:27 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2004 ls Nov 13 16:06:35 bastion LinuxCommandsWazuh: User ubuntu [3181743]: 2002 exitr Nov 13 16:08:18 bastion LinuxCommandsWazuh: User ubuntu [3181220]: 2004 ls Nov 13 16:08:23 bastion LinuxCommandsWazuh: User ubuntu [3183788]: 2000 exit Nov 13 16:08:24 bastion LinuxCommandsWazuh: User ubuntu [3183788]: 2001 ls Nov 13 16:08:49 bastion LinuxCommandsWazuh: User ubuntu [3183788]: 2002 sudo openvpn --config aws.ovpn Nov 13 16:17:32 bastion LinuxCommandsWazuh: User abhijeet [3201372]: 1998 exit Nov 13 16:17:33 bastion LinuxCommandsWazuh: User abhijeet [3201372]: 1999 ls Nov 13 16:17:39 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2000 exit Nov 13 16:17:40 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2001 cd Nov 13 16:17:41 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2002 ls Nov 13 16:17:42 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2002 ls Nov 13 16:17:43 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2003 cd Nov 13 16:17:44 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3201615]: 2003 cd] Nov 13 16:17:52 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2004 ' Nov 13 16:17:53 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2005 ls Nov 13 16:18:10 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2005 ls Nov 13 16:18:16 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2006 lsc Nov 13 16:18:20 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2007 ls -lrth Nov 13 16:18:21 bastion LinuxCommandsWazuh: User ubuntu [3201615]: 2008 date Nov 13 16:25:15 bastion LinuxCommandsWazuh: User ubuntu [1202]: 2000 sudo openvpn --config gcp.ovpn Nov 13 16:25:16 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [1202]: 2000 sudo openvpn --config gcp.ovpn ] Nov 13 16:25:16 bastion LinuxCommandsWazuh: User ubuntu [1202]: 2000 sudo openvpn --config gcp.ovpn Nov 13 16:25:21 bastion LinuxCommandsWazuh: User ubuntu [1202]: 2001 htop Nov 13 16:25:21 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [1202]: 2001 htop] Nov 13 16:25:28 bastion LinuxCommandsWazuh: User ubuntu [1202]: 2002 ssh ubuntu@10.190.0.8 Nov 13 16:25:42 bastion LinuxCommandsWazuh: User ubuntu [1202]: 2003 cool-server Nov 13 16:26:12 bastion LinuxCommandsWazuh: User ubuntu [1480]: 2000 exit Nov 13 16:26:15 bastion LinuxCommandsWazuh: User ubuntu [1480]: 2001 'exit Nov 13 16:27:21 bastion LinuxCommandsWazuh: User aman [1622]: 650 clear Nov 13 16:42:54 bastion LinuxCommandsWazuh: User abhijeet [3517]: 1998 mongo-ssh Nov 13 16:42:55 bastion LinuxCommandsWazuh: User abhijeet [3517]: 1999 ls Nov 13 16:56:14 bastion LinuxCommandsWazuh: User abhijeet [3517]: 1999 ls Nov 13 16:56:19 bastion LinuxCommandsWazuh: User abhijeet [3517]: 2000 cat .ssh/authorized_keys Nov 13 16:56:34 bastion LinuxCommandsWazuh: User abhijeet [3517]: 2001 ls Nov 13 16:56:40 bastion LinuxCommandsWazuh: User abhijeet [3517]: 2002 cat .ssh/id_rsa.pub Nov 13 16:58:05 bastion LinuxCommandsWazuh: User anam [5095]: 241 sudo su ubuntu Nov 13 16:58:06 bastion LinuxCommandsWazuh: User anam [5095]: 242 cd Nov 13 16:58:10 bastion LinuxCommandsWazuh: User anam [5095]: 243 cat .ssh/id_rsa.pub Nov 13 16:58:55 bastion LinuxCommandsWazuh: User anam [5095]: 244 ssh ubuntu@34.131.81.52 Nov 13 16:58:59 bastion LinuxCommandsWazuh: User anam [5095]: 244 ssh ubuntu@34.131.81.52 Nov 13 16:59:18 bastion LinuxCommandsWazuh: User anam [5095]: 245 ssh anam@34.131.81.52 Nov 13 16:59:19 bastion LinuxCommandsWazuh: User anam [5095]: 246 ls Nov 13 17:00:03 bastion LinuxCommandsWazuh: User anam [5095]: 247 vim .bashrc Nov 13 17:00:06 bastion LinuxCommandsWazuh: User anam [5095]: 248 source .bashrc Nov 13 17:00:32 bastion LinuxCommandsWazuh: User ubuntu [5454]: 2000 exit Nov 13 17:00:50 bastion LinuxCommandsWazuh: User ubuntu [5454]: 2001 cool-server Nov 13 17:00:52 bastion LinuxCommandsWazuh: User anam [5581]: 241 sudo su ubuntu Nov 13 17:01:06 bastion LinuxCommandsWazuh: User anam [5581]: 242 vpn-server Nov 13 17:01:10 bastion LinuxCommandsWazuh: User anam [5095]: 249 cat .bashrc Nov 13 17:18:14 bastion LinuxCommandsWazuh: User anam [7255]: 241 sudo su ubuntu Nov 13 17:18:23 bastion LinuxCommandsWazuh: User anam [7255]: 242 vpn-server Nov 13 17:19:18 bastion LinuxCommandsWazuh: User ashish [7387]: 898 mongo pixel_v1; Nov 13 17:19:21 bastion LinuxCommandsWazuh: User ashish [7446]: 898 mongo pixel_v1; Nov 13 17:19:41 bastion LinuxCommandsWazuh: User anam [8011]: 243 gcp-vpn-client Nov 13 17:21:19 bastion LinuxCommandsWazuh: User anam [8011]: 243 gcp-vpn-client Nov 13 17:22:10 bastion LinuxCommandsWazuh: User anam [10541]: 245 gcp-vpn-client Nov 13 17:23:42 bastion LinuxCommandsWazuh: User anam [5095]: 250 ssh anam@34.131.81.52 Nov 13 17:23:44 bastion LinuxCommandsWazuh: User anam [5095]: 251 ssh anam@34.131.81.52 --v Nov 13 17:24:26 bastion LinuxCommandsWazuh: User anam [10541]: 245 gcp-vpn-client Nov 13 17:24:51 bastion LinuxCommandsWazuh: User anam [5095]: 252 ssh anam@34.131.81.52 -vv Nov 13 17:25:32 bastion LinuxCommandsWazuh: User mohtashim [14386]: 846 mongo pixel_v1 Nov 13 17:27:37 bastion LinuxCommandsWazuh: User anam [5095]: 252 ssh anam@34.131.81.52 -vv Nov 13 17:29:29 bastion LinuxCommandsWazuh: User anam [5095]: 252 ssh anam@34.131.81.52 -vv Nov 13 17:31:45 bastion LinuxCommandsWazuh: User anam [5095]: 253 ssh anam@34.131.0.213 -vv Nov 13 17:31:53 bastion LinuxCommandsWazuh: User anam [10541]: 245 gcp-vpn-client Nov 13 17:40:55 bastion LinuxCommandsWazuh: User mohtashim [14386]: 847 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 13 17:41:33 bastion LinuxCommandsWazuh: User mohtashim [29909]: 846 mongo pixel_v1 Nov 13 17:42:43 bastion LinuxCommandsWazuh: User mohtashim [31088]: 846 mongo pixel_v1 Nov 13 17:42:56 bastion LinuxCommandsWazuh: User mohtashim [31088]: 847 k get pods | grep "vortex" Nov 13 17:48:34 bastion LinuxCommandsWazuh: User anam [10541]: 245 gcp-vpn-client Nov 13 17:48:40 bastion LinuxCommandsWazuh: User anam [10541]: 245 gcp-vpn-client Nov 13 17:51:22 bastion LinuxCommandsWazuh: User abhijeet [39862]: 1998 mongo-ssh Nov 13 17:51:23 bastion LinuxCommandsWazuh: User abhijeet [39862]: 1999 ls Nov 13 17:51:34 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2000 #sudo wget -O ./aws-replication-installer-init https://aws-application-migration-service-ap-south-1.s3.ap-south-1.amazonaws.com/latest/linux/aws-replication-installer-init Nov 13 17:51:59 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2001 mkdir app-mig Nov 13 17:52:02 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2002 cd app-mig/ Nov 13 17:52:03 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2003 ls Nov 13 17:52:05 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2004 sudo wget -O ./aws-replication-installer-init https://aws-application-migration-service-ap-south-1.s3.ap-south-1.amazonaws.com/latest/linux/aws-replication-installer-init Nov 13 17:52:13 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2005 sudo chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init --region ap-south-1 --aws-access-key-id Abhijeet --aws-secret-access-key 8871592651@As --no-prompt Nov 13 17:55:58 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2006 sudo chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init --region ap-south-1 --aws-access-key-id Abhijeet --aws-secret-access-key 8871592651@As --aws-session-token 896271372615 --no-prompt Nov 13 17:57:21 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2007 sudo chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init --region ap-south-1 --aws-access-key-id Abhijeet --aws-secret-access-key umUZlNskkGPHh3JYSPJ+qJz9ovDkpkHHgxBYfZuL --aws-session-token AKIA5BLPP2FD7SJB6K7G --no-prompt Nov 13 17:57:36 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2008 sudo chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init --region ap-south-1 --aws-access-key-id Abhijeet --aws-secret-access-key umUZlNskkGPHh3JYSPJ+qJz9ovDkpkHHgxBYfZuL --no-prompt Nov 13 18:06:57 bastion LinuxCommandsWazuh: User ayush [56171]: 610 mongo Nov 13 18:06:59 bastion LinuxCommandsWazuh: User ayush [56171]: 611 clear Nov 13 18:07:04 bastion LinuxCommandsWazuh: User ayush [56171]: 612 byobub Nov 13 18:07:05 bastion LinuxCommandsWazuh: User ayush [56368]: 610 mongo Nov 13 18:07:21 bastion LinuxCommandsWazuh: User ayush [56368]: 611 kubectl get configmap Nov 13 18:07:26 bastion LinuxCommandsWazuh: User ayush [56368]: 612 kubectl get configmap | data Nov 13 18:07:30 bastion LinuxCommandsWazuh: User ayush [56368]: 613 kubectl get configmap | grep data Nov 13 18:20:40 bastion LinuxCommandsWazuh: User ubuntu [77101]: 2000 exit Nov 13 18:20:41 bastion LinuxCommandsWazuh: User ubuntu [77101]: 2001 ls Nov 13 18:20:48 bastion LinuxCommandsWazuh: User ubuntu [77101]: 2001 ls Nov 13 18:20:49 bastion LinuxCommandsWazuh: User ubuntu [77101]: 2002 cd .. Nov 13 18:20:51 bastion LinuxCommandsWazuh: User ubuntu [77101]: 2003 sudo su mohtashim/ Nov 13 18:20:53 bastion LinuxCommandsWazuh: User mohtashim [77334]: 848 mongo pixel_v1 Nov 13 18:20:53 bastion LinuxCommandsWazuh: User mohtashim [77334]: 849 cd Nov 13 18:20:54 bastion LinuxCommandsWazuh: User mohtashim [77334]: 850 ls Nov 13 18:22:01 bastion LinuxCommandsWazuh: User mohtashim [77334]: 851 crontab -e Nov 13 18:29:23 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2009 sudo chmod +x aws-replication-installer-init; sudo ./aws-replication-installer-init --region ap-south-1 --aws-access-key-id AKIA5BLPP2FDSPS6U447 --aws-secret-access-key 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 --no-prompt Nov 13 18:33:26 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2010 uname -r Nov 13 18:36:04 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2011 ls /lib/modules/$(uname -r)/build Nov 13 18:50:51 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2012 cd Nov 13 18:50:52 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2013 ls Nov 13 18:50:54 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2013 ls Nov 13 18:50:55 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2014 ;' Nov 13 18:51:00 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2015 cat .bashrc Nov 13 18:51:09 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2016 cat .bashrc | grep mon Nov 13 18:59:41 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2017 netstat -tunlp Nov 13 19:00:03 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2018 cat .bashrc Nov 13 19:00:07 bastion LinuxCommandsWazuh: User abhijeet [39862]: 2019 cat .bashrc | grep mongo Nov 13 19:52:14 bastion LinuxCommandsWazuh: User abhijeet [136369]: 1998 mongo-ssh Nov 13 19:52:26 bastion LinuxCommandsWazuh: User abhijeet [136369]: 1999 kubectl get svc -n nitrox-production Nov 13 19:54:44 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2000 curl http://rewards-be.nitrox-productoin.svc.cluster.local:10030 Nov 13 19:55:01 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2001 curl http://rewards-be.svc.cluster.local:10030 -v Nov 13 19:56:25 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2001 curl http://rewards-be.svc.cluster.local:10030 -v Nov 13 19:56:26 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2002 # run a debug pod and query DNS Nov 13 20:01:32 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2003 kubectl run -i --tty dns-test --image=busybox --rm --restart=Never -- sh Nov 13 20:01:34 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2004 ls Nov 13 20:01:44 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2005 kubectl get pods | grep data Nov 13 20:01:52 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2006 watch kubectl get pods | grep data Nov 13 20:02:02 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2007 watch 'kubectl get pods | grep data' Nov 13 20:03:02 bastion LinuxCommandsWazuh: User abhijeet [138021]: 1998 mongo-ssh Nov 13 20:03:05 bastion LinuxCommandsWazuh: User abhijeet [138021]: 1999 kubectl logs datapulse-web-7ddf5b97f4-lkh24 Nov 13 20:03:14 bastion LinuxCommandsWazuh: User abhijeet [138021]: 2000 kubectl logs datapulse-web-7ddf5b97f4-lkh24 -f Nov 13 20:03:23 bastion LinuxCommandsWazuh: User abhijeet [138021]: 2001 kubectl logs datapulse-web-7ddf5b97f4-69mqp Nov 13 20:04:24 bastion LinuxCommandsWazuh: User abhijeet [138727]: 1998 mongo-ssh Nov 13 20:04:32 bastion LinuxCommandsWazuh: User abhijeet [138727]: 1999 kubectl get node | grep data Nov 13 20:05:58 bastion LinuxCommandsWazuh: User abhijeet [138727]: 1999 kubectl get node | grep data Nov 13 20:06:02 bastion LinuxCommandsWazuh: User abhijeet [138727]: 2000 kubectl top node | grep data Nov 13 20:06:16 bastion LinuxCommandsWazuh: User abhijeet [138727]: 2000 kubectl top node | grep data Nov 13 20:07:01 bastion LinuxCommandsWazuh: User abhijeet [138727]: 2000 kubectl top node | grep data Nov 13 20:09:36 bastion LinuxCommandsWazuh: User abhijeet [138021]: 2002 kubectl logs datapulse-web-7ddf5b97f4-69mqp -f Nov 13 20:10:00 bastion LinuxCommandsWazuh: User abhijeet [138021]: 2003 ls Nov 13 20:10:41 bastion LinuxCommandsWazuh: User abhijeet [138727]: 2000 kubectl top node | grep data Nov 13 20:39:57 bastion LinuxCommandsWazuh: User abhijeet [136369]: 2008 watch 'kubectl get pods -o wide| grep data'