172.31.18.4:9000 tcp TIME-WAIT 0 0 127.0.0.1:48132 127.0.0.1:5000 tcp TIME-WAIT 0 0 127.0.0.1:51822 127.0.0.1:5000 tcp TIME-WAIT 0 0 172.31.45.67:45600 172.31.18.4:9000 tcp TIME-WAIT 0 0 172.31.45.67:46848 172.31.18.4:9000 tcp TIME-WAIT 0 0 172.31.45.67:46880 172.31.18.4:9000 tcp TIME-WAIT 0 0 172.31.45.67:45610 172.31.18.4:9000 tcp LISTEN 0 4096 *:6767 *:* tcp LISTEN 0 4096 *:8080 *:* tcp LISTEN 0 128 [::]:22 [::]:* tcp ESTAB 0 0 [::ffff:172.31.45.67]:8080 [::ffff:172.31.16.109]:59956 admin@i-00c8d7508d4dbeee3:~$ ss -lan
paris/i-00c8d7508d4dbeee3
by SadServersMore by SadServers
admin@i-09691d997134773d9:~$ ls -larth total 48K -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout drwxr-xr-x 3 root root 4.0K Sep 17 16:44 .. drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh drwx------ 3 admin admin 4.0K Sep 20 15:52 .ansible drwxr-xr-x 3 admin admin 4.0K Sep 20 15:56 .config -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py drwxr-xr-x 2 admin root 4.0K Sep 24 23:20 agent -rw------- 1 admin admin 684 Feb 22 16:13 .viminfo drwxr-xr-x 6 admin admin 4.0K Feb 22 16:13 . -rw------- 1 admin admin 666 Feb 22 16:14 .bash_history admin@i-09691d997134773d9:~$ sudo cat webserver.py
paris/i-09691d997134773d9 04:14
by SadServersroot 588 0.1 0.3 2872 1652 tty1 Ss+ 15:43 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux root 590 0.0 0.4 4396 2140 ttyS0 Ss+ 15:43 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,9600 ttyS0 vt220 root 591 0.0 1.5 13352 7188 ? Ss 15:43 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups _chrony 593 0.0 0.7 10852 3596 ? S 15:43 0:00 /usr/sbin/chronyd -F 1 _chrony 604 0.0 0.1 10724 552 ? S 15:43 0:00 \_ /usr/sbin/chronyd -F 1 root 603 0.0 3.7 26612 17364 ? Ss 15:43 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signaladmin@i-001eabc18e1752db3:~$ cat ~/webserver.py cat: /home/admin/webserver.py: Permission denied admin@i-001eabc18e1752db3:~$
paris/i-001eabc18e1752db3 03:40
by SadServerscron.weekly inputrc netconfig rsyslog.d ufw crontab iproute2 network runit update-motd.d dbus-1 issue networks sadscenario vim debconf.conf issue.net nsswitch.conf screenrc wgetrc debian_version kernel opt security xattr.conf default kernel-img.conf os-release selinux xdg deluser.conf ld.so.cache pam.conf services xml dhcp ld.so.conf pam.d sgml dpkg ld.so.conf.d passwd shadow e2scrub.conf ldap passwd- shadow- admin@i-0721aaa53e9f7c820:~$ ls /etc/apache2/ conf-available admin@i-0721aaa53e9f7c820:~$ ls /etc/apache2/conf-available/