Aug 27 07:07:18 bastion LinuxCommandsWazuh: User ubuntu [422191]: 552 sudo su rihan Aug 27 07:07:20 bastion LinuxCommandsWazuh: User rihan [422207]: 79 cookie Aug 27 07:07:21 bastion LinuxCommandsWazuh: User rihan [422207]: 80 cd Aug 27 07:17:30 bastion LinuxCommandsWazuh: User devesh [422419]: 68 mongo pixel_v1 Aug 27 07:27:38 bastion LinuxCommandsWazuh: User devesh [422577]: 68 mongo pixel_v1 Aug 27 07:27:44 bastion LinuxCommandsWazuh: User devesh [422577]: 69 cookie' Aug 27 08:06:32 bastion LinuxCommandsWazuh: User devesh [423228]: 68 mongo pixel_v1 Aug 27 08:21:27 bastion LinuxCommandsWazuh: User rihan [422207]: 81 cookie Aug 27 09:15:56 bastion LinuxCommandsWazuh: User devyanshu [424698]: 85 internal Aug 27 09:16:01 bastion LinuxCommandsWazuh: User devyanshu [424830]: 85 internal Aug 27 09:16:02 bastion LinuxCommandsWazuh: User devyanshu [424830]: 86 ls Aug 27 09:17:18 bastion LinuxCommandsWazuh: User devyanshu [424830]: 87 psql -U dbuser -p 5432 -h 35.185.151.238 Aug 27 09:17:26 bastion LinuxCommandsWazuh: User devyanshu [424830]: 87 psql -U dbuser -p 5432 -h 35.185.151.238 Aug 27 09:52:07 bastion LinuxCommandsWazuh: User devesh [458876]: 71 cookie Aug 27 10:05:30 bastion LinuxCommandsWazuh: User devyanshu [470032]: 86 byobu Aug 27 10:07:52 bastion LinuxCommandsWazuh: User devesh [472406]: 71 cookie Aug 27 10:12:26 bastion LinuxCommandsWazuh: User ubuntu [476852]: 552 sudo su rihan Aug 27 10:12:31 bastion LinuxCommandsWazuh: User rihan [476940]: 81 cookie Aug 27 10:12:32 bastion LinuxCommandsWazuh: User rihan [476940]: 82 cd Aug 27 10:12:32 bastion LinuxCommandsWazuh: User rihan [476940]: 83 ls Aug 27 10:30:36 bastion LinuxCommandsWazuh: User devesh [494070]: 71 cookie Aug 27 11:35:29 bastion LinuxCommandsWazuh: User devesh [494070]: 72 psql Aug 27 11:35:46 bastion LinuxCommandsWazuh: User devesh [494070]: 73 redis Aug 27 11:35:51 bastion LinuxCommandsWazuh: User devesh [555825]: 73 redis Aug 27 11:36:17 bastion LinuxCommandsWazuh: User devesh [555825]: 74 cookie Aug 27 12:07:48 bastion LinuxCommandsWazuh: User devyanshu [424830]: 87 psql -U dbuser -p 5432 -h 35.185.151.238 Aug 27 12:08:29 bastion LinuxCommandsWazuh: User devyanshu [424830]: 88 psql -U dbuser -p 5432 -h 35.185.151.238 alfred_v1 Aug 27 12:09:21 bastion LinuxCommandsWazuh: message repeated 4 times: [ User devyanshu [424830]: 88 psql -U dbuser -p 5432 -h 35.185.151.238 alfred_v1] Aug 27 12:09:37 bastion LinuxCommandsWazuh: User devyanshu [424830]: 89 psql -U postgres -p 5432 -h 35.185.151.238 alfred_v1 Aug 27 12:45:50 bastion LinuxCommandsWazuh: User devyanshu [621657]: 86 byobu Aug 27 12:45:54 bastion LinuxCommandsWazuh: User devyanshu [621818]: 86 byobu Aug 27 12:46:02 bastion LinuxCommandsWazuh: User devyanshu [621818]: 87 sudo su - Aug 27 12:46:30 bastion LinuxCommandsWazuh: User devyanshu [621818]: 88 sudo su - ak Aug 27 12:46:43 bastion LinuxCommandsWazuh: User devyanshu [621818]: 89 sudo su - ubuntu Aug 27 12:46:49 bastion LinuxCommandsWazuh: User devyanshu [621818]: su - ubuntu Aug 27 12:47:10 bastion LinuxCommandsWazuh: User devyanshu [621818]: 1 internal Aug 27 12:47:27 bastion LinuxCommandsWazuh: User devyanshu [624288]: 2 exit Aug 27 13:46:59 bastion LinuxCommandsWazuh: User rihan [476940]: 84 cookie Aug 27 13:47:00 bastion LinuxCommandsWazuh: User ubuntu [476852]: 552 sudo su rihan