-rw-r--r-- 1 admin admin 3526 Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4096 Sep 20 2023 .config -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4096 Sep 17 2023 .ssh drwxr-xr-x 2 admin root 4096 Sep 24 2023 agent -rwxrwx--- 1 root root 360 Sep 24 2023 webserver.py admin@i-0b644d124da7e660c:~$ ls /var/ backups cache lib local lock log mail opt run spool tmp admin@i-0b644d124da7e660c:~$ ls /var/log/ alternatives.log auth.log btmp chrony daemon.log debug dpkg.log journal kern.log.2.gz messages.1 private syslog.1 user.log wtmp alternatives.log.1 auth.log.1 btmp.1 cloud-init-output.log daemon.log.1 debug.1 dpkg.log.1 kern.log lastlog messages.2.gz runit syslog.2.gz user.log.1 apt auth.log.2.gz cast cloud-init.log daemon.log.2.gz debug.2.gz faillog kern.log.1 messages minio.log syslog unattended-upgrades user.log.2.gz admin@i-0b644d124da7e660c:~$ tail /var/lo local/ lock/ log/ admin@i-0b644d124da7e660c:~$ tail /var/log/auth.log Jan 16 19:11:28 i-0b644d124da7e660c sudo: pam_unix(sudo:auth): conversation failed Jan 16 19:11:28 i-0b644d124da7e660c sudo: pam_unix(sudo:auth): auth could not identify password for [admin] admin@i-0b644d124da7e660c:~$ tail /var/log/auth.log.1 Sep 24 23:20:52 i-03be7122de01cf0bf systemd-logind[573]: System is powering down. Sep 24 23:20:52 i-03be7122de01cf0bf sshd[636]: pam_unix(sshd:session): session closed for user admin Sep 24 23:20:52 i-03be7122de01cf0bf sshd[636]: pam_systemd(sshd:session): Failed to release session: Interrupted system call Jan 16 19:08:48 i-0b644d124da7e660c passwd[552]: password for 'admin' changed by 'root' Jan 16 19:08:48 i-0b644d124da7e660c sshd[591]: Server listening on 0.0.0.0 port 22. Jan 16 19:08:48 i-0b644d124da7e660c sshd[591]: Server listening on :: port 22. Jan 16 19:08:48 i-0b644d124da7e660c systemd-logind[584]: Watching system buttons on /dev/input/event1 (Power Button) Jan 16 19:08:48 i-0b644d124da7e660c systemd-logind[584]: Watching system buttons on /dev/input/event2 (Sleep Button) Jan 16 19:08:48 i-0b644d124da7e660c systemd-logind[584]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jan 16 19:08:48 i-0b644d124da7e660c systemd-logind[584]: New seat seat0. admin@i-0b644d124da7e660c:~$ ls /var/log/apt/ eipp.log.xz history.log history.log.1.gz term.log term.log.1.gz admin@i-0b644d124da7e660c:~$ ls agent webserver.py admin@i-0b644d124da7e660c:~$
