|
Nov 26, 20:16:31
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -E 2025-11-0\[78\]\|Nov.\*0\[78\]
|
Info
|
|
|
Nov 26, 20:16:31
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -i -E \(session\|sudo\|reboot\|shutdown\)
|
Critical
|
|
|
Nov 26, 20:16:31
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
tail -50
|
Info
|
|
|
Nov 26, 20:16:30
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
eval 'cat /var/log/auth.log 2>/dev/null < /dev/nul...
|
Critical
|
|
|
Nov 26, 20:16:30
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
cat /var/log/auth.log 2> /dev/null < /dev/null
|
Info
|
|
|
Nov 26, 20:16:29
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:29
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 20:16:28
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 20:16:28
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 20:16:28
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:27
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 20:16:27
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 20:16:27
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:26
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:26
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 20:16:26
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Nov 26, 20:16:25
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Nov 26, 20:16:25
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Nov 26, 20:16:25
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 20:16:24
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 20:16:24
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:24
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 20:16:23
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:23
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 20:16:22
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:22
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 20:16:22
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 20:16:21
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|
|
Nov 26, 20:16:20
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
unset i
|
Info
|
|
|
Nov 26, 20:16:20
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 20:16:20
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Nov 26, 20:16:19
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 20:16:18
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:18
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:18
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 20:16:18
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 20:16:17
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 20:16:17
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 20:16:16
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 20:16:16
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:15
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-52f3-cwd
|
Info
|
|
|
Nov 26, 20:16:14
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 20:16:14
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
eval 'last -x 2>&1 < /dev/null | grep -E shutdown\...
|
Critical
|
|
|
Nov 26, 20:16:14
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
last -x 2>&1 < /dev/null
|
Info
|
|
|
Nov 26, 20:16:13
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 20:16:13
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 20:16:13
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 20:16:12
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 20:16:12
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 20:16:12
4 weeks ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|