|
Nov 26, 13:17:41
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Nov 26, 13:17:41
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Nov 26, 13:17:40
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 13:17:40
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 13:17:40
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:39
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:39
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:39
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 13:17:38
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:38
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 13:17:38
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 13:17:38
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 13:17:32
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
sort -rn
|
Info
|
|
|
Nov 26, 13:17:32
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
head -20
|
Info
|
|
|
Nov 26, 13:17:32
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-cd7d-cwd
|
Info
|
|
|
Nov 26, 13:17:31
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
cut -d\: -f1
|
Info
|
|
|
Nov 26, 13:17:31
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
sort
|
Info
|
|
|
Nov 26, 13:17:31
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
uniq -c
|
Info
|
|
|
Nov 26, 13:17:30
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
grep -E 8\[0-9\]\{3\}\$
|
Info
|
|
|
Nov 26, 13:17:30
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
awk '{print $4}'
|
Info
|
|
|
Nov 26, 13:17:29
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 13:17:29
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
eval "ss -tn state established < /dev/null | grep...
|
Critical
|
|
|
Nov 26, 13:17:29
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
ss -tn state established < /dev/null
|
Critical
|
|
|
Nov 26, 13:17:28
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 13:17:28
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 13:17:28
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:27
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:27
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 13:17:26
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 13:17:26
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 13:17:26
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 13:17:26
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:25
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Nov 26, 13:17:25
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Nov 26, 13:17:25
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:24
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:24
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Nov 26, 13:17:24
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Nov 26, 13:17:23
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Nov 26, 13:17:23
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Nov 26, 13:17:23
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Nov 26, 13:17:22
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Nov 26, 13:17:22
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Nov 26, 13:17:22
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:21
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Nov 26, 13:17:21
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Nov 26, 13:17:21
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Nov 26, 13:17:20
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Nov 26, 13:17:20
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Nov 26, 13:17:20
3 months ago
|
default-host
|
Command
|
104.238.132.126
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|