|
Nov 26, 19:09:14
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:13
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Nov 26, 19:09:13
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:13
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 19:09:12
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 19:09:12
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 19:09:12
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 19:09:12
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Nov 26, 19:09:12
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Nov 26, 19:09:11
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 19:09:11
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:11
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 19:09:11
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 19:09:10
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:10
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 19:09:10
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 19:09:10
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 19:09:09
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Nov 26, 19:09:09
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Nov 26, 19:09:09
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|
|
Nov 26, 19:09:08
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 19:09:08
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 19:09:08
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 19:09:08
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
unset i
|
Info
|
|
|
Nov 26, 19:09:07
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 19:09:07
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:07
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 19:09:07
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 19:09:06
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 19:09:06
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 19:09:06
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 19:09:06
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 19:09:05
3 months ago
|
default-host
|
Ssh Login
|
64.176.194.149
|
209.6.216.95
|
root
|
No details
|
Warning
|
|
|
Nov 26, 19:07:33
3 months ago
|
default-host
|
Ssh Login
|
64.176.212.158
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 19:05:50
3 months ago
|
default-host
|
Ssh Login
|
104.238.132.126
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 18:36:42
3 months ago
|
default-host
|
Ssh Logout
|
104.238.132.126
|
N/A
|
session_702
|
No details
|
Info
|
|
|
Nov 26, 18:36:42
3 months ago
|
default-host
|
Ssh Logout
|
104.238.132.126
|
N/A
|
root
|
No details
|
Info
|
|
|
Nov 26, 18:09:30
3 months ago
|
default-host
|
Ssh Login
|
64.176.212.158
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 18:08:53
3 months ago
|
default-host
|
Ssh Logout
|
64.176.194.149
|
N/A
|
session_539
|
No details
|
Info
|
|
|
Nov 26, 18:08:53
3 months ago
|
default-host
|
Ssh Logout
|
64.176.194.149
|
N/A
|
root
|
No details
|
Info
|
|
|
Nov 26, 18:06:56
3 months ago
|
default-host
|
Ssh Login
|
104.238.132.126
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 17:09:23
3 months ago
|
default-host
|
Ssh Login
|
64.176.212.158
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 17:06:55
3 months ago
|
default-host
|
Ssh Login
|
104.238.132.126
|
N/A
|
N/A
|
No details
|
Warning
|
|
|
Nov 26, 16:23:45
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
grep -v grep
|
Info
|
|
|
Nov 26, 16:23:45
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-2a54-cwd
|
Info
|
|
|
Nov 26, 16:23:44
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
eval 'ps aux < /dev/null | grep auditd | grep -v g...
|
Info
|
|
|
Nov 26, 16:23:44
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
ps aux < /dev/null
|
Info
|
|
|
Nov 26, 16:23:44
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 16:23:44
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
grep auditd
|
Info
|
|
|
Nov 26, 16:23:43
3 months ago
|
default-host
|
Command
|
64.176.194.149
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|