auth.log:Jan 19 14:28:16 pc sshd[31332]: Accepted keyboard-interactive/pam for root from 103.41.124.101 port 47104 ssh2
auth.log:Jan 19 18:36:32 pc sshd[418]: Accepted keyboard-interactive/pam for root from 148.163.4.178 port 40696 ssh2
537561 612 -rwxr-xr-x 1 root root 618631 Jan 20 01:33 /lib/libgcc.so
915632 612 -rwxr-xr-x 1 root root 618642 Jan 20 00:28 /usr/bin/zlsjlwybks
701174 0 lrwxrwxrwx 1 root root 20 Jan 20 00:28 /etc/rc1.d/S01zlsjlwybks -> ../init.d/zlsjlwybks
701320 0 lrwxrwxrwx 1 root root 20 Jan 20 00:28 /etc/rc3.d/S01zlsjlwybks -> ../init.d/zlsjlwybks
701197 0 lrwxrwxrwx 1 root root 20 Jan 20 00:28 /etc/rc2.d/S01zlsjlwybks -> ../init.d/zlsjlwybks
701453 0 lrwxrwxrwx 1 root root 20 Jan 20 00:28 /etc/rc5.d/S01zlsjlwybks -> ../init.d/zlsjlwybks
701384 0 lrwxrwxrwx 1 root root 20 Jan 20 00:28 /etc/rc4.d/S01zlsjlwybks -> ../init.d/zlsjlwybks
701617 4 -rw-r--r-- 1 root root 764 Jan 20 00:28 /etc/crontab
701002 4 -rwxr-xr-x 1 root root 323 Jan 20 00:28 /etc/init.d/zlsjlwybks
700947 4 -rwxr-xr-x 1 root root 229 Jan 20 00:28 /etc/cron.hourly/cron.sh
# strings libgcc.so
BB2FA36AAA9541F0
103.25.9.228
8.8.8.8
CAk[S