command-line-murders/i-0ce91fcff25164590
by SadServersMore by SadServers
otty.js Jan 23 00:10:24 i-0f850090026917c38 gotty[556]: 2025/01/23 00:10:24 172.31.16.10fest.json Jan 23 00:10:24 i-0f850090026917c38 gotty[556]: 2025/01/23 00:10:24 172.31.16.10.svg Jan 23 00:10:24 i-0f850090026917c38 gotty[556]: 2025/01/23 00:10:24 New client c09:44316, connections: 1/5 Jan 23 00:10:24 i-0f850090026917c38 gotty[556]: 2025/01/23 00:10:24 172.31.16.10_192.png Jan 23 00:10:24 i-0f850090026917c38 gotty[556]: 2025/01/23 00:10:24 172.31.16.10con.ico Jan 23 00:10:27 i-0f850090026917c38 systemd[1]: mc.service: Succeeded. Jan 23 00:10:27 i-0f850090026917c38 systemd[1]: mc.service: Consumed 1.050s CPU Jan 23 00:10:49 i-0f850090026917c38 dhclient[461]: XMT: Solicit on ens5, interva:
paris/i-0f850090026917c38 01:43
by SadServersbash: start: command not found admin@i-0f1e5ff82074e1a48:~$ runs /home/admin/kihei bash: runs: command not found admin@i-0f1e5ff82074e1a48:~$ /home/admin/kihei panic: exit status 1 goroutine 1 [running]: main.main() ./main.go:64 +0x47d admin@i-0f1e5ff82074e1a48:~$ ls -l /home/admin/kihei -rwxr-xr-x 1 admin root 2207109 Sep 17 17:28 /home/admin/kihei admin@i-0f1e5ff82074e1a48:~$ chown -R root:root /home/admin/kihei chown: changing ownership of '/home/admin/kihei': Operation not permitted admin@i-0f1e5ff82074e1a48:~$ sudo chown -R root:root /home/admin/kihei admin@i-0f1e5ff82074e1a48:~$
kihei/i-0f1e5ff82074e1a48 03:23
by SadServersroot 572 0.1 6.0 107132 28272 ? Ss 21:59 0:00 /usr/bin/pythroot 575 0.0 0.9 220796 4224 ? Ssl 21:59 0:00 /usr/sbin/rsyroot 585 0.0 1.4 13492 6540 ? Ss 21:59 0:00 /lib/systemd/root 590 0.0 1.5 13352 7188 ? Ss 21:59 0:00 sshd: /usr/sbroot 591 0.0 0.3 2872 1764 tty1 Ss+ 21:59 0:00 /sbin/agetty root 592 0.0 0.4 4396 2036 ttyS0 Ss+ 21:59 0:00 /sbin/agetty _chrony 594 0.0 0.7 10852 3604 ? S 21:59 0:00 /usr/sbin/chr_chrony 595 0.0 0.1 10724 556 ? S 21:59 0:00 \_ /usr/sbinroot 609 0.0 3.7 26612 17372 ? Ss 21:59 0:00 /usr/bin/pythroot 770 0.0 0.7 5788 3268 ? Ss 22:02 0:00 /bin/bash /roroot 789 0.0 6.7 1254320 31692 ? Sl 22:02 0:00 \_ mc mirroradmin@i-002259b1376148ae2:/var/log$ cd /home/admin/ admin@i-002259b1376148ae2:~$ ls agent webserver.py admin@i-002259b1376148ae2:~$ ps auxf | grep w