Forum Discussion

azuresigma's avatar
azuresigma
Copper Contributor
Oct 15, 2023

Virtual Machine with Ubuntu in Azure running commands "print(AGENT_VERSION)", etc

I have a Virtual Machine with latest Ubuntu Server installed.


The VM started running the following commands without me beeing logged in.
Is the server hacked?

 

15:49:01 New processes:

  • /usr/bin/python3 -c from azurelinuxagent.common.version import AGENT_VERSION; print(AGENT_VERSION)
  • /usr/bin/python3 -Es /usr/bin/lsb_release -a
  • dpkg-query -f ${Version} ${Provides}
    -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security
  • uname -rs

 


15:49:05 DNS Requests

  • sevillecloudgateway-neu3-prd.trafficmanager.net
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
  • "sevillecloudgateway-neu3-prd.trafficmanager.net"
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
  • "sevillecloudgateway-neu3-prd.trafficmanager.net"
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"
  • "sevillecloudgateway-neu3-prd.trafficmanager.net"
  • "mps-mde-prd-neu3-14.northeurope.cloudapp.azure.com"

 

No RepliesBe the first to reply

Resources