command-line-murders/i-0c0b3e512486ccf1d
by SadServersMore by SadServers
-rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh drwxr-xr-x 2 admin root 4.0K Sep 17 17:28 agent drwxr-xr-x 2 admin root 4.0K Feb 18 21:46 data -rw-r--r-- 1 root root 5.0G Sep 17 17:28 datafile -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei admin@i-00f84c75e524759c9:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.1G 1.2G 84% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-00f84c75e524759c9:~$ lsof
kihei/i-00f84c75e524759c9 04:19
by SadServerspgrades/unattended-upgrade-shutdown -- root 620 0.0 0.0 0 0 ? I 21:48 0:00 [kworker/0:3-root 685 0.0 0.0 0 0 ? I 21:48 0:00 [kworker/0:4-admin 687 0.0 0.9 6740 4416 pts/0 S<s+ 21:49 0:00 bash -l admin 691 0.2 4.1 98188 19244 pts/0 D<l+ 21:49 0:00 /usr/bin/pyth-t paris/i-036f8423c1405f693 -q -i 2 / admin 694 0.0 3.0 24456 14396 pts/0 R<+ 21:49 0:00 /usr/bin/pyth-t paris/i-036f8423c1405f693 -q -i 2 / admin 695 0.0 0.1 2480 508 pts/1 S<s 21:49 0:00 sh -c /bin/baadmin 696 0.0 0.9 6820 4588 pts/1 S< 21:49 0:00 /bin/bash root 714 0.0 0.0 0 0 ? I 21:49 0:00 [kworker/1:3-root 716 0.0 0.0 0 0 ? I 21:49 0:00 [kworker/1:4-root 776 0.0 0.0 0 0 ? R 21:50 0:00 [kworker/u4:4admin 777 0.0 0.6 8648 3216 pts/1 R<+ 21:51 0:00 ps aux admin@i-036f8423c1405f693:~$
paris/i-036f8423c1405f693 02:01
by SadServers(Reading database ... 26694 files and directories currently installed.) Removing python3-docutils (0.16+dfsg-4) ... Removing docutils-common (0.16+dfsg-4) ... Removing python3-s3transfer (0.3.4-1) ... Removing python3-botocore (1.20.0+repack-1) ... Removing python3-colorama (0.4.4-1) ... Removing python3-dateutil (2.8.1-6) ... Removing python3-jmespath (0.10.0-1) ... Removing python3-rsa (4.0-4) ... Removing python3-pyasn1 (0.4.8-1) ... Removing python3-roman (2.0.0-5) ... Removing xml-core (0.18+nmu1) ... Removing sgml-base (1.30) ... Processing triggers for man-db (2.9.4-2) ... admin@i-07e90a9a64bfa8d98:~$