azuresigma
Oct 15, 2023Copper Contributor
Virtual Machine with Ubuntu in Azure running commands "print(AGENT_VERSION)", etc
I have a Virtual Machine with latest Ubuntu Server installed.
The VM started running the following commands without me beeing logged in.
Is the server hacked?
15:49:01 New processes:
- /usr/bin/python3 -c from azurelinuxagent.common.version import AGENT_VERSION; print(AGENT_VERSION)
- /usr/bin/python3 -Es /usr/bin/lsb_release -a
- dpkg-query -f ${Version} ${Provides}
-W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security - uname -rs
15:49:05 DNS Requests
- sevillecloudgateway-neu3-prd.trafficmanager.net
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
- "sevillecloudgateway-neu3-prd.trafficmanager.net"
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
- "sevillecloudgateway-neu3-prd.trafficmanager.net"
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
- "sevillecloudgateway-neu3-prd.trafficmanager.net"
- "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"