paris/i-0d7d6ed418963724f
by SadServersMore by SadServers
admin 801 0.0 4.1 98188 19424 pts/0 S<l+ 10:11 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab -q -i 2 /var/log/cast/i-025570eb46de4c5ab admin 804 0.0 3.0 24456 14368 pts/0 S<+ 10:11 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab -q -i 2 /var/log/cast/i-025570eb46de4c5ab admin 953 0.0 0.1 5264 640 pts/1 S<+ 10:16 0:00 grep kihei admin@i-025570eb46de4c5ab:~$ kill 801 admin@i-025570eb46de4c5ab:~$ ps aux | grep kihei admin 987 2.0 4.1 98188 19436 pts/0 S<l+ 10:16 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab --append -q -i 2 /var/log/cast/i-025570eb46de4c5admin 990 0.0 3.1 24456 14872 pts/0 S<+ 10:16 0:00 /usr/bin/pythec -t kihei/i-025570eb46de4c5ab --append -q -i 2 /var/log/cast/i-025570eb46de4c5admin 996 0.0 0.1 5264 640 pts/1 S<+ 10:16 0:00 grep kihei admin@i-025570eb46de4c5ab:~$ ls -al /var/log/cast/i-025570eb46de4c5ab -rw-r--r-- 1 admin admin 19241 Nov 5 10:17 /var/log/cast/i-025570eb46de4c5ab admin@i-025570eb46de4c5ab:~$ l /var/log/cast/i-025570eb46de4c5ab
kihei/i-025570eb46de4c5ab 05:17
by SadServers==================>] 12 --.-KB/s in 0s 2023-10-30 13:01:48 (156 KB/s) - ‘index.html’ saved [12/12] admin@i-0e456693a82527eea:~/agent$ admin@i-0e456693a82527eea:~/agent$ rm index.html admin@i-0e456693a82527eea:~/agent$ wget -q localhost:5000 | awk '{print NF}' admin@i-0e456693a82527eea:~/agent$ wget -q http://localhost:5000 | awk '{print Nadmin@i-0e456693a82527eea:~/agent$ !rm rm index.html admin@i-0e456693a82527eea:~/agent$ wget -O - -q http://localhost:5000 | awk '{pr1 admin@i-0e456693a82527eea:~/agent$ wget -O - -q http://localhost:5000 | awk '{prUnauthorized admin@i-0e456693a82527eea:~/agent$
paris/i-0e456693a82527eea 02:50
by SadServersadmin 695 0.1 3.0 24456 14368 pts/0 R<+ 20:14 0:00 /usr/bin/pythadmin 696 0.0 0.1 2480 508 pts/1 S<s 20:14 0:00 sh -c /bin/baadmin 697 0.1 0.9 6820 4564 pts/1 S< 20:14 0:00 /bin/bash admin 705 0.0 0.6 8648 3220 pts/1 R<+ 20:14 0:00 ps aux admin@i-06d8a1ea39f24c764:~$ netstat -nltp (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp6 0 0 :::6767 :::* LISTEN tcp6 0 0 :::8080 :::* LISTEN tcp6 0 0 :::22 :::* LISTEN admin@i-06d8a1ea39f24c764:~$