command-line-murders/i-0bf744948ac460d40
by SadServersMore by SadServers
Dec 16 19:58:09 i-087a04010afc840a2 sudo[686]: pam_unix(sudo:session): session o) by (uid=1000) root@i-087a04010afc840a2:/home/admin# ^C root@i-087a04010afc840a2:/home/admin# tail -f /etc/systemd/system/gotty.service [Service] User=admin Group=admin ExecStart=/usr/local/gotty --permit-write --reconnect --max-connection 5 bash -lWorkingDirectory=/home/admin Restart=on-failure Nice=-20 [Install] WantedBy=multi-user.target
kihei/i-087a04010afc840a2 00:58
by SadServers1 linux root 597 0.0 0.4 4396 2168 ttyS0 Ss+ 23:03 0:00 /sbin/agetty 15200,57600,38400,9600 ttyS0 vt220 root 604 0.0 3.7 26612 17400 ? Ss 23:03 0:00 /usr/bin/pyth-upgrades/unattended-upgrade-shutdown --wait-for-signal admin 678 0.0 0.9 6740 4392 pts/0 S<s+ 23:03 0:00 bash -l admin 682 0.1 4.1 98188 19300 pts/0 D<l+ 23:03 0:00 /usr/bin/pythc -t paris/i-0c3e1a7726191eaab -q -i 2 /var/log/cast/i-0c3e1a7726191eaab admin 685 0.0 3.1 24456 14824 pts/0 S<+ 23:03 0:00 /usr/bin/pythc -t paris/i-0c3e1a7726191eaab -q -i 2 /var/log/cast/i-0c3e1a7726191eaab admin 686 0.0 0.1 2480 576 pts/1 S<s 23:03 0:00 sh -c /bin/baadmin 687 0.0 1.0 6952 4744 pts/1 S< 23:03 0:00 /bin/bash root 736 0.0 0.0 0 0 ? R 23:05 0:00 [kworker/u4:4admin 860 0.0 0.6 8648 3212 pts/1 R<+ 23:07 0:00 ps aux admin@i-0c3e1a7726191eaab:~$ pytho
paris/i-0c3e1a7726191eaab 04:41
by SadServersroot 594 0.0 3.7 26612 17396 ? Ss 17:08 0:00 /usr/bin/pyth_chrony 596 0.0 0.7 10852 3604 ? S 17:08 0:00 /usr/sbin/chr_chrony 598 0.0 0.1 10724 548 ? S 17:08 0:00 /usr/sbin/chrroot 680 0.0 0.0 0 0 ? I 17:08 0:00 [kworker/1:4-admin 683 0.0 0.9 6740 4460 pts/0 S<s+ 17:09 0:00 bash -l admin 687 0.1 4.1 98188 19320 pts/0 R<l+ 17:09 0:00 /usr/bin/pythadmin 690 0.0 3.0 24456 14420 pts/0 R<+ 17:09 0:00 /usr/bin/pythadmin 691 0.0 0.1 2480 500 pts/1 S<s 17:09 0:00 sh -c /bin/baadmin 692 0.0 1.0 6952 4756 pts/1 S< 17:09 0:00 /bin/bash admin 793 0.0 0.6 8648 3244 pts/1 R<+ 17:11 0:00 ps aux admin@i-01ae2ccb494fc3a25:~$ nc -zv 5000 nc: missing port number admin@i-01ae2ccb494fc3a25:~$ nc -zv localhost 5000 Connection to localhost (127.0.0.1) 5000 port [tcp/*] succeeded! admin@i-01ae2ccb494fc3a25:~$ ps aux