|
Nov 26, 15:29:55
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 15:29:55
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:55
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:54
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:53
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
grep 199.180.150.130 /var/log/audit/audit.log < /d...
|
Info
|
|
|
Nov 26, 15:29:53
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
head -20
|
Info
|
|
|
Nov 26, 15:29:53
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-50e1-cwd
|
Info
|
|
|
Nov 26, 15:29:52
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 15:29:52
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 15:29:52
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:52
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 15:29:52
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
eval 'grep 199.180.150.130 /var/log/audit/audit.lo...
|
Info
|
|
|
Nov 26, 15:29:51
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 15:29:51
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:51
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:51
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 15:29:50
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Nov 26, 15:29:50
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:50
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 15:29:50
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 15:29:49
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 15:29:49
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:49
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 15:29:49
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Nov 26, 15:29:49
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Nov 26, 15:29:48
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 15:29:48
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 15:29:48
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:48
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:48
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 15:29:47
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:47
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 15:29:47
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 15:29:46
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
unset i
|
Info
|
|
|
Nov 26, 15:29:46
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Nov 26, 15:29:46
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Nov 26, 15:29:46
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|
|
Nov 26, 15:29:45
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 15:29:45
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 15:29:45
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:45
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 15:29:44
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 15:29:44
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 15:29:44
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:44
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 15:29:43
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 15:29:43
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 15:29:43
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 15:29:28
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-2904-cwd
|
Info
|
|
|
Nov 26, 15:29:10
3 months ago
|
default-host
|
Command
|
64.176.212.158
|
209.6.216.95
|
root
|
xargs grep -l 199.180.150.130 2> /dev/null
|
Info
|
|