[HONEYPOT] 93.190.139.152 :: Capabilities check

Jun 22 04:30:45 localhost sshd[26037]: Accepted password for root from 93.190.139.152 port 18777 ssh2
Jun 22 04:30:45 localhost sshd[26037]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jun 22 04:30:45 localhost snoopy[26041]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/bash]: bash -c cat /etc/issue ; uname -a ; echo === ; cat /proc/cpuinfo | grep "model name" ; echo === ; ifconfig ; echo === ; echo === ; gcc ; df -h
Jun 22 04:30:45 localhost snoopy[26043]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/sbin/consoletype]: /sbin/consoletype stdout
Jun 22 04:30:45 localhost snoopy[26045]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/usr/bin/id]: /usr/bin/id -u
Jun 22 04:30:45 localhost snoopy[26046]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/cat]: cat /etc/issue
Jun 22 04:30:45 localhost snoopy[26047]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/uname]: uname -a
Jun 22 04:30:45 localhost snoopy[26049]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/grep]: grep model name
Jun 22 04:30:45 localhost snoopy[26048]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/cat]: cat /proc/cpuinfo
Jun 22 04:30:45 localhost snoopy[26050]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/sbin/ifconfig]: ifconfig
Jun 22 04:30:45 localhost snoopy[26051]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/usr/bin/gcc]: gcc
Jun 22 04:30:45 localhost snoopy[26052]: [uid:0 sid:26041 tty:(none) cwd:/root filename:/bin/df]: df -h
Jun 22 04:30:46 localhost sshd[26037]: Received disconnect from 93.190.139.152: 11: disconnected by user
Jun 22 04:30:46 localhost sshd[26037]: pam_unix(sshd:session): session closed for user root