|
Dec 7, 20:38:32
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:38:31
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:38:31
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:38:30
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:38:30
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:38:29
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:38:29
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:38:28
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:38:27
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Dec 7, 20:38:27
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Dec 7, 20:38:27
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|
|
Dec 7, 20:38:26
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:38:26
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
unset i
|
Info
|
|
|
Dec 7, 20:38:25
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:38:24
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 7, 20:38:24
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:38:23
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:38:23
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:38:22
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:38:22
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:38:21
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:38:20
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:38:20
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:37:52
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-276f-cwd
|
Info
|
|
|
Dec 7, 20:37:51
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
jq -r .command 2> /dev/null
|
Info
|
|
|
Dec 7, 20:37:51
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
head -100
|
Info
|
|
|
Dec 7, 20:37:50
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -v shopt
|
Critical
|
|
|
Dec 7, 20:37:50
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -v 'export HIST'
|
Info
|
|
|
Dec 7, 20:37:49
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep 2025-12-02T05 /var/log/grutu/collected_logs.j...
|
Info
|
|
|
Dec 7, 20:37:49
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep '"command"'
|
Info
|
|
|
Dec 7, 20:37:49
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -v HIST
|
Info
|
|
|
Dec 7, 20:37:48
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
eval "grep 2025-12-02T05 /var/log/grutu/collected_...
|
Critical
|
|
|
Dec 7, 20:37:47
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:37:47
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:37:47
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:37:46
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:37:46
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 7, 20:37:45
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:37:45
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:37:45
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:37:44
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:37:44
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:37:44
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:37:43
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Dec 7, 20:37:42
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Dec 7, 20:37:42
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Dec 7, 20:37:41
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:37:41
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:37:41
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:37:40
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|