|
Dec 1, 23:02:57
3 weeks ago
|
default-host
|
Command
|
64.176.194.149
|
66.135.25.80
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 1, 23:02:57
3 weeks ago
|
default-host
|
Command
|
64.176.194.149
|
66.135.25.80
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 1, 23:02:57
3 weeks ago
|
default-host
|
Command
|
64.176.194.149
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:57
3 weeks ago
|
default-host
|
Command
|
64.176.194.149
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:56
3 weeks ago
|
default-host
|
Ssh Login
|
64.176.194.149
|
66.135.25.80
|
root
|
No details
|
Warning
|
|
|
Dec 1, 23:02:56
3 weeks ago
|
default-host
|
Command
|
64.176.194.149
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:55
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
grep -E 'python|audit|kaudit|PID'
|
Info
|
|
|
Dec 1, 23:02:55
3 weeks ago
|
default-host
|
Ssh Logout
|
140.82.46.49
|
N/A
|
root
|
No details
|
Info
|
|
|
Dec 1, 23:02:55
3 weeks ago
|
default-host
|
Ssh Logout
|
140.82.46.49
|
N/A
|
session_700
|
No details
|
Info
|
|
|
Dec 1, 23:02:55
3 weeks ago
|
default-host
|
Ssh Logout
|
140.82.46.49
|
N/A
|
root
|
No details
|
Info
|
|
|
Dec 1, 23:02:54
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
top -bn1 -o %CPU
|
Info
|
|
|
Dec 1, 23:02:54
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
head -20
|
Info
|
|
|
Dec 1, 23:02:53
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:53
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 1, 23:02:53
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
echo '=== AZURA3 TOP CPU PROCESSES ==='
|
Info
|
|
|
Dec 1, 23:02:52
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 1, 23:02:52
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 1, 23:02:52
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 1, 23:02:51
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 1, 23:02:51
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:51
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:50
3 weeks ago
|
default-host
|
Ssh Login
|
140.82.46.49
|
66.135.25.80
|
root
|
No details
|
Warning
|
|
|
Dec 1, 23:02:50
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:50
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 1, 23:02:50
3 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
66.135.25.80
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 1, 23:02:49
3 weeks ago
|
default-host
|
Ssh Logout
|
104.238.132.126
|
N/A
|
root
|
No details
|
Info
|
|
|
Dec 1, 23:02:49
3 weeks ago
|
default-host
|
Ssh Logout
|
104.238.132.126
|
N/A
|
root
|
No details
|
Info
|
|
|
Dec 1, 23:02:49
3 weeks ago
|
default-host
|
Ssh Logout
|
104.238.132.126
|
N/A
|
session_856
|
No details
|
Info
|
|
|
Dec 1, 23:02:48
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
grep -E 'python|audit|kaudit|PID'
|
Info
|
|
|
Dec 1, 23:02:48
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
head -20
|
Info
|
|
|
Dec 1, 23:02:47
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
echo '=== AZURA2 TOP CPU PROCESSES ==='
|
Info
|
|
|
Dec 1, 23:02:47
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
top -bn1 -o %CPU
|
Info
|
|
|
Dec 1, 23:02:46
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:46
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 1, 23:02:45
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 1, 23:02:45
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 1, 23:02:45
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 1, 23:02:44
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:44
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:43
3 weeks ago
|
default-host
|
Ssh Login
|
104.238.132.126
|
66.135.25.80
|
root
|
No details
|
Warning
|
|
|
Dec 1, 23:02:43
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 1, 23:02:43
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 1, 23:02:43
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 1, 23:02:43
3 weeks ago
|
default-host
|
Command
|
104.238.132.126
|
66.135.25.80
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 1, 23:02:28
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
grep python
|
Info
|
|
|
Dec 1, 23:02:27
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 1, 23:02:27
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 1, 23:02:27
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
echo '=== NETWORK CONNECTIONS FROM PYTHON ==='
|
Info
|
|
|
Dec 1, 23:02:27
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
netstat -tnp 2> /dev/null
|
Info
|
|
|
Dec 1, 23:02:26
3 weeks ago
|
default-host
|
Command
|
64.176.212.158
|
66.135.25.80
|
root
|
export HISTSIZE=50000
|
Info
|
|