|
Dec 7, 20:27:23
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:23
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:27:22
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:27:22
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:27:21
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:27:21
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:27:20
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
source /etc/profile.d/honeypot.sh 2> /dev/null
|
Critical
|
|
|
Dec 7, 20:27:20
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:19
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:27:19
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
mesg n 2> /dev/null
|
Info
|
|
|
Dec 7, 20:27:19
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
true
|
Info
|
|
|
Dec 7, 20:27:18
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:27:18
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:27:17
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 7, 20:27:16
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:27:16
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:16
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:27:15
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:27:14
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:27:14
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:27:13
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:12
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
[ -f ~/.bashrc ]
|
Critical
|
|
|
Dec 7, 20:27:12
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
. ~/.bashrc
|
Critical
|
|
|
Dec 7, 20:27:11
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
unset i
|
Info
|
|
|
Dec 7, 20:27:11
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
[ "$BASH" ]
|
Critical
|
|
|
Dec 7, 20:27:10
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:27:09
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:27:09
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:27:08
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|
|
Dec 7, 20:27:08
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=50000
|
Info
|
|
|
Dec 7, 20:27:07
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:06
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=
|
Info
|
|
|
Dec 7, 20:27:06
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:27:05
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:27:05
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=10000
|
Info
|
|
|
Dec 7, 20:27:05
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILESIZE=10000
|
Info
|
|
|
Dec 7, 20:26:57
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
pwd -P >| /tmp/claude-61a5-cwd
|
Info
|
|
|
Dec 7, 20:26:56
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep 05\:31\:38
|
Info
|
|
|
Dec 7, 20:26:56
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
head -20
|
Info
|
|
|
Dec 7, 20:26:55
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
head -50
|
Info
|
|
|
Dec 7, 20:26:55
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
cat /var/log/audit/audit.log 2> /dev/null
|
Info
|
|
|
Dec 7, 20:26:54
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -i 'Dec 02'
|
Info
|
|
|
Dec 7, 20:26:54
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
grep -i 05\:31
|
Info
|
|
|
Dec 7, 20:26:53
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTFILE="${HOME}/.bash_history_$(date +%Y%...
|
Critical
|
|
|
Dec 7, 20:26:53
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
eval "zcat /var/log/audit/audit.log.*.gz 2>/dev/nu...
|
Info
|
|
|
Dec 7, 20:26:53
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
zcat /var/log/audit/audit.log.*.gz 2> /dev/null <...
|
Info
|
|
|
Dec 7, 20:26:52
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTCONTROL=""
|
Info
|
|
|
Dec 7, 20:26:52
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
shopt -s histappend
|
Critical
|
|
|
Dec 7, 20:26:51
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTTIMEFORMAT="%Y-%m-%d %H:%M:%S "
|
Critical
|
|
|
Dec 7, 20:26:51
3 months ago
|
default-host
|
Command
|
140.82.46.49
|
209.6.216.95
|
root
|
export HISTSIZE=50000
|
Info
|
|