command-line-murders/i-0ef3e084d521485fc
by SadServersMore by SadServers
udp 0 0 0.0.0.0:68 0.0.0.0:* udp6 0 0 fe80::813:15ff:fe50:546 :::* udp6 0 0 ::1:323 :::* Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node PID/Program name unix 2 [ ACC ] STREAM LISTENING 9661 - unix 2 [ ACC ] STREAM LISTENING 10561 - unix 2 [ ACC ] STREAM LISTENING 10563 - unix 2 [ ACC ] STREAM LISTENING 9615 - unix 2 [ ACC ] STREAM LISTENING 9617 - unix 2 [ ACC ] STREAM LISTENING 9618 - unix 2 [ ACC ] STREAM LISTENING 9630 - unix 2 [ ACC ] STREAM LISTENING 9638 - unix 2 [ ACC ] SEQPACKET LISTENING 9640 - admin@i-05f9095b8fa200e0d:~$ ls
paris/i-05f9095b8fa200e0d 03:43
by SadServersdrwx------ 5 root root 4096 Jan 25 19:49 root drwxr-xr-x 22 root root 620 Jan 25 19:49 run lrwxrwxrwx 1 root root 8 Sep 28 2021 sbin -> usr/sbin drwxr-xr-x 2 root root 4096 Sep 28 2021 srv dr-xr-xr-x 13 root root 0 Jan 25 19:48 sys drwxrwxrwt 9 root root 4096 Jan 25 19:49 tmp drwxr-xr-x 14 root root 4096 Sep 28 2021 usr drwxr-xr-x 11 root root 4096 Sep 28 2021 var admin@i-0f29e47a857c873d8:/$ ls opt admin@i-0f29e47a857c873d8:/$ ls run agetty.reload cloud-init dbus initramfs network sshblkid credentials dhclient.ens5.pid lock screen sshchrony crond.pid dhclient6.ens5.pid log sendsigs.omit.d sudchrony-dhcp crond.reboot initctl mount shm sysadmin@i-0f29e47a857c873d8:/$ cd run
paris/i-0f29e47a857c873d8 03:51
by SadServerscast/ dpkg.log messages.2.gz user.log.2.chrony/ dpkg.log.1 minio.log wtmp admin@i-069e102734ffdd250:~$ less /var/log/messages admin@i-069e102734ffdd250:~$ cd /var/log/ admin@i-069e102734ffdd250:/var/log$ ls alternatives.log cast debug.1 kern.log.2.gz syslog alternatives.log.1 chrony debug.2.gz lastlog syslog.1 apt cloud-init-output.log dpkg.log messages syslog.2.gauth.log cloud-init.log dpkg.log.1 messages.1 unattendedauth.log.1 daemon.log faillog messages.2.gz user.log auth.log.2.gz daemon.log.1 journal minio.log user.log.1btmp daemon.log.2.gz kern.log private user.log.2btmp.1 debug kern.log.1 runit wtmp admin@i-069e102734ffdd250:/var/log$ less auth.log admin@i-069e102734ffdd250:/var/log$ less