kihei/i-0c387d7e1fbccda67
by SadServersMore by SadServers
lsof: unknown protocol name (5000) in: -i 5000 lsof 4.93.2 latest revision: https://github.com/lsof-org/lsof latest FAQ: https://github.com/lsof-org/lsof/blob/master/00FAQ latest (non-formatted) man page: https://github.com/lsof-org/lsof/blob/master/L usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-E] [+|-e s] [+|-f[gG]] [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s] [+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names] Use the ``-h'' option to get more help information. admin@i-0dd9ca4bd7a358734:~$ ^Cof -i 5000 admin@i-0dd9ca4bd7a358734:~$ ps aux | grep upnp admin 828 0.0 0.1 5264 632 pts/1 S<+ 00:54 0:00 grep upnp admin@i-0dd9ca4bd7a358734:~$ systemctl | grep upnp admin@i-0dd9ca4bd7a358734:~$ journalctl | grep upnp admin@i-0dd9ca4bd7a358734:~$ lsof -i TLS
paris/i-0dd9ca4bd7a358734 04:34
by SadServers/cpu.CacheLineSizeinternal/cpu.X86internal/cpu.optionsinternal/cpu.maxExtendedFunittaskpath.ErrBadPatterngo.itab.*flag.boolValue,flag.Valuego.itab.*os.File,io.WmError,errorgo.itab.*reflect.rtype,reflect.Typego.itab.*flag.durationValue,flag.64Value,flag.Valuego.itab.*flag.intValue,flag.Valuego.itab.*flag.int64Value,flagngValue,flag.Valuego.itab.*flag.uintValue,flag.Valuego.itab.*flag.uint64Value,fl.Builder,io.Writergo.itab.*errors.errorString,errorgo.itab.*fmt.wrapError,errorggo.itab.*os.File,io.Readergo.itab.syscall.Signal,os.Signalgo.itab.*io/fs.PathErrallError,errorgo.itab.syscall.Errno,errorgo.itab.os.onlyWriter,io.Writergo.itab.nfogo.itab.*io.LimitedReader,io.Readergo.itab.*os.File,io.Closergo.itab.*os/exec*os/exec.Error,errorgo.itab.*bufio.Reader,io.Readergo.itab.os/user.UnknownUserIdrnal/reflectlite.rtype,internal/reflectlite.Typego.itab.time.fileSizeError,errort.SortedMap,sort.Interfacego.itab.runtime.errorString,error_cgo_init_cgo_thread__init_done_cgo_callers_cgo_yield_cgo_mmap_cgo_munmap_cgo_sigactionruntime.mainPCeadlineExceededError,errorgo.itab.internal/poll.errNetClosing,errorruntime.defaudVersion.strruntime.modinfo.strtype.*runtime.textsectionmapadmin@i-062042b0fb20a
kihei/i-062042b0fb20a2893 02:05
by SadServersroot 614 0.0 0.0 0 0 ? I 11:23 0:00 [kworker/0:3-root 678 0.0 0.0 0 0 ? I 11:23 0:00 [kworker/0:4-admin 709 0.0 0.9 6740 4376 pts/0 S<s+ 11:24 0:00 bash -l admin 714 0.2 4.1 98188 19364 pts/0 S<l+ 11:24 0:00 /usr/bin/pythadmin 717 0.0 3.1 24456 14504 pts/0 R<+ 11:24 0:00 /usr/bin/pythadmin 718 0.0 0.1 2480 508 pts/1 S<s 11:24 0:00 sh -c /bin/baadmin 719 0.0 0.9 6820 4612 pts/1 S< 11:24 0:00 /bin/bash admin 759 0.0 0.6 8648 3248 pts/1 R<+ 11:25 0:00 ps aux admin@i-0c3de957f9712f12c:~$ ls agent webserver.py admin@i-0c3de957f9712f12c:~$ less webserver.py webserver.py: Permission denied admin@i-0c3de957f9712f12c:~$ cat webserver.py cat: webserver.py: Permission denied admin@i-0c3de957f9712f12c:~$ ls -
paris/i-0c3de957f9712f12c 01:23
by SadServersdrwxr-xr-x 2 admin root 4.0K Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-0a40943c8c217e6da:~$ vim webserver.py admin@i-0a40943c8c217e6da:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: Sorry, try again. [sudo] password for admin: