Aug 21 06:29:37 bastion LinuxCommandsWazuh: User ubuntu [309306]:   517  sudo su rihan
Aug 21 06:29:39 bastion LinuxCommandsWazuh: User rihan [309320]:    46  cookie
Aug 21 06:29:41 bastion LinuxCommandsWazuh: User rihan [309320]:    47  cooki
Aug 21 06:30:12 bastion LinuxCommandsWazuh: User rihan [309320]:    48  cookie
Aug 21 09:09:12 bastion LinuxCommandsWazuh: User ubuntu [310974]:   517  sudo su rihan
Aug 21 09:09:13 bastion LinuxCommandsWazuh: User ubuntu [310974]:   518  ls
Aug 21 09:09:18 bastion LinuxCommandsWazuh: User rihan [311000]:    46  cookie
Aug 21 09:52:03 bastion LinuxCommandsWazuh: User shamailtayyab [311416]:    49  ssh shamailtayyab@34.131.11.11
Aug 21 09:53:14 bastion LinuxCommandsWazuh: User shamailtayyab [311416]:    49  ssh shamailtayyab@34.131.11.11
Aug 21 09:53:15 bastion LinuxCommandsWazuh: User shamailtayyab [311416]:    49  ssh shamailtayyab@34.131.11.11
Aug 21 10:38:10 bastion LinuxCommandsWazuh: User anshika [311767]:    49  internal
Aug 21 11:14:42 bastion LinuxCommandsWazuh: User rihan [312109]:    46  cookie
Aug 21 11:14:44 bastion LinuxCommandsWazuh: User shamailtayyab [312202]:    49  ssh shamailtayyab@34.131.11.11
Aug 21 11:51:13 bastion LinuxCommandsWazuh: User rihan [309320]:    49  queues
Aug 21 11:51:41 bastion LinuxCommandsWazuh: User rihan [311000]:    46  cookie
Aug 21 12:33:41 bastion LinuxCommandsWazuh: User rihan [312109]:    47  cookie 
Aug 21 15:13:39 bastion LinuxCommandsWazuh: User ubuntu [315342]:   519  sudo su rihan
Aug 21 15:13:44 bastion LinuxCommandsWazuh: User rihan [315355]:    50  cookie 
Aug 21 15:26:58 bastion LinuxCommandsWazuh: User rihan [315355]:    51  cookie
Aug 21 15:40:56 bastion LinuxCommandsWazuh: User ubuntu [315615]:   519  sudo su rihan
Aug 21 15:41:07 bastion LinuxCommandsWazuh: User ubuntu [315615]:   520  nslookup https://t.makehook.ws/amazin-spiderman
Aug 21 15:41:21 bastion LinuxCommandsWazuh: User ubuntu [315615]:   521  nslookup t.makehook.ws/amazin-spiderman
Aug 21 15:41:25 bastion LinuxCommandsWazuh: User ubuntu [315615]:   522  nslookup t.makehook.ws
Aug 21 15:41:29 bastion LinuxCommandsWazuh: User ubuntu [315615]:   523  dig t.makehook.ws
Aug 21 15:42:09 bastion LinuxCommandsWazuh: User ubuntu [315615]:   524  ping t.makehook.ws
Aug 21 15:42:28 bastion LinuxCommandsWazuh: User ubuntu [315615]:   525  traceroute t.makehook.ws
Aug 21 15:42:42 bastion LinuxCommandsWazuh: User ubuntu [315615]:   526  sudo apt install traceroute
Aug 21 15:43:14 bastion LinuxCommandsWazuh: User ubuntu [315615]:   527  traceroute t.makehook.ws
Aug 21 15:43:17 bastion LinuxCommandsWazuh: User ubuntu [315964]:   519  sudo su rihan
Aug 21 15:43:25 bastion LinuxCommandsWazuh: User rihan [315977]:    51  cookie
Aug 21 15:43:26 bastion LinuxCommandsWazuh: User rihan [315977]:    52  cd
Aug 21 15:45:03 bastion LinuxCommandsWazuh: User ubuntu [315615]:   527  traceroute t.makehook.ws
Aug 21 15:45:04 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [315615]:   527  traceroute t.makehook.ws]
Aug 21 15:45:08 bastion LinuxCommandsWazuh: User rihan [316029]:    51  cookie
Aug 21 15:57:02 bastion LinuxCommandsWazuh: User devesh [316337]:    60  cookie 
Aug 21 16:07:54 bastion LinuxCommandsWazuh: User devesh [316505]:    60  cookie 
Aug 21 16:20:08 bastion LinuxCommandsWazuh: User rihan [315977]:    53  cookie
Aug 21 16:20:10 bastion LinuxCommandsWazuh: User devesh [316505]:    61  cookie
Aug 21 16:22:58 bastion LinuxCommandsWazuh: User rihan [315977]:    53  cookie
Aug 21 16:22:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [315977]:    53  cookie]
Aug 21 16:27:45 bastion LinuxCommandsWazuh: User devesh [316951]:    61  cookie
Aug 21 16:33:16 bastion LinuxCommandsWazuh: User rihan [316029]:    52  queues 
Aug 21 16:34:19 bastion LinuxCommandsWazuh: User rihan [315977]:    53  cookie