command-line-murders/i-0a9b8bd0f82b5cf7f
by SadServersMore by SadServers
0:00 grep webserver admin@i-0f52b9b9e90050f5c:~$ ls -la total 44 drwxr-xr-x 6 admin admin 4096 Sep 24 23:20 . drwxr-xr-x 3 root root 4096 Sep 17 16:44 .. drwx------ 3 admin admin 4096 Sep 20 15:52 .ansible -rw------- 1 admin admin 454 Oct 4 14:29 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 15:56 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0f52b9b9e90050f5c:~$
paris/i-0f52b9b9e90050f5c 02:03
by SadServers559 ? S<sl 0:00 /home/admin/agent/sadagent 562 ? Ss 0:00 /usr/sbin/cron -f 563 ? Ss 0:00 /usr/bin/dbus-daemon --system --address=systemd: -- 575 ? Ss 0:00 /usr/bin/python3 /home/admin/webserver.py 576 ? Ssl 0:00 /usr/sbin/rsyslogd -n -iNONE 582 ? Ss 0:00 /lib/systemd/systemd-logind 584 ? Ss 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 star 585 tty1 Ss+ 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux 586 ttyS0 Ss+ 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,3 588 ? S 0:00 /usr/sbin/chronyd -F 1 589 ? S 0:00 \_ /usr/sbin/chronyd -F 1 606 ? Ss 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unaadmin@i-04f25c68fa11fb6a2:~$ curl -A "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5it/537.36 (KHTML, like Gecko) Chrome/W.X.Y.Z Mobile Safari/537.36 (compatible; G.google.com/bot.html)"
paris/i-04f25c68fa11fb6a2 00:29
by SadServersadmin@i-0dcdab756bd34fbc5:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0dcdab756bd34fbc5:~$ admin@i-0dcdab756bd34fbc5:~$ ls agent data datafile kihei admin@i-0dcdab756bd34fbc5:~$ cat