command-line-murders/i-03ebd347a9253a962
by SadServersMore by SadServers
root 590 0.0 0.9 220796 4244 ? Ssl 14:15 0:00 /usr/sbin/rsyroot 594 0.1 1.1 13488 5416 ? Ss 14:15 0:00 /lib/systemd/_chrony 595 0.0 0.7 10856 3724 ? S 14:15 0:00 /usr/sbin/chr_chrony 600 0.0 0.1 10724 556 ? S 14:15 0:00 /usr/sbin/chrroot 601 0.2 0.3 2872 1740 tty1 Ss+ 14:15 0:00 /sbin/agetty root 603 0.0 0.4 4396 2144 ttyS0 Ss+ 14:15 0:00 /sbin/agetty root 604 0.0 1.5 13348 7020 ? Ss 14:15 0:00 sshd: /usr/sbroot 620 0.1 3.7 26612 17336 ? Ss 14:15 0:00 /usr/bin/pythadmin 675 0.0 0.7 5920 3632 pts/0 S<s+ 14:15 0:00 bash -l admin 678 0.4 4.1 98188 19388 pts/0 R<l+ 14:15 0:00 /usr/bin/pythadmin 681 0.0 3.0 24456 14432 pts/0 R<+ 14:15 0:00 /usr/bin/pythadmin 682 0.0 0.1 2480 508 pts/1 S<s 14:15 0:00 sh -c /bin/baadmin 683 0.0 0.9 6820 4428 pts/1 S< 14:15 0:00 /bin/bash admin 688 0.0 0.6 8648 3176 pts/1 R<+ 14:16 0:00 ps auux admin@i-0113c5af4b6af66cd:~$ which
kihei/i-0113c5af4b6af66cd 00:33
by SadServersadmin@i-0ead36c6be7f7d974:~$ ls -s data total 0 0 kihei admin@i-0ead36c6be7f7d974:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi tmpfs 2.0G 0 2.0G 0% /tmp/kihei admin@i-0ead36c6be7f7d974:~$ ln -s /tmp/kihei/ /home/admin/data ln: failed to create symbolic link '/home/admin/data/kihei': File exists admin@i-0ead36c6be7f7d974:~$ mo
kihei/i-0ead36c6be7f7d974 03:05
by SadServerstcp ESTAB 0 0 [::ffff:172.31. [::ffff:172.31.16.109]:49770 timer:(keepalive,3.216ms,0) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i:5000 admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$ lsof -i COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 558 admin 6u IPv6 10895 0t0 TCP *:http-alt (LISTEN) gotty 558 admin 7u IPv6 12340 0t0 TCP ip-172-31-40-35.us-east-2.co>ip-172-31-16-109.us-east-2.compute.internal:49770 (ESTABLISHED) sadagent 559 admin 7u IPv6 1958 0t0 TCP *:6767 (LISTEN) admin@i-0bce630416db45b25:~$ admin@i-0bce630416db45b25:~$