root@le:~# systemctl list-unit-files --all | grep -v -E "^(dev-|proc-|sys-|run-|snap.|-.mount|systemd-|dbus|ssh|cron|rsyslog|network|docker|containerd|nginx|apache|mysql|php|redis)" | grep -v "^$" UNIT FILE STATE PRESET media-cdrom0.mount generated - session-27.scope transient - session-29.scope transient - session-31.scope transient - session-32.scope transient - apparmor.service enabled enabled apt-daily-upgrade.service static - apt-daily.service static - [email protected] alias - console-getty.service disabled disabled console-setup.service enabled enabled [email protected] static - cryptdisks-early.service masked enabled cryptdisks.service masked enabled debug-shell.service disabled disabled dpkg-db-backup.service static - [email protected] static - e2scrub_all.service static - [email protected] static - e2scrub_reap.service enabled enabled emergency.service static - fail2ban.service enabled enabled fstrim.service static - getty-static.service static - [email protected] enabled enabled hermes-gateway.service enabled enabled hwclock.service masked enabled hysteria-server.service enabled enabled [email protected] disabled enabled [email protected] static - ifupdown-pre.service static - ifupdown-wait-online.service disabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - ip6tables.service alias - iptables.service alias - keyboard-setup.service enabled enabled kmod-static-nodes.service static - kmod.service alias - logrotate.service static - man-db.service static - [email protected] static - netfilter-persistent.service enabled enabled nezha-agent.service enabled enabled nftables.service disabled enabled pam_namespace.service static - procps.service alias - qemu-guest-agent.service static - quotaon.service static - rc-local.service enabled enabled rc.service masked enabled rcS.service masked enabled rescue.service static - [email protected] disabled enabled sudo.service masked enabled system-update-cleanup.service static - udev.service alias - [email protected] static - [email protected] static - x11-common.service masked enabled xray.service enabled enabled machine.slice static - system-systemd\x2dcryptsetup.slice static - user.slice static - syslog.socket static - swapfile.swap generated - basic.target static - [email protected] static - bluetooth.target static - boot-complete.target static - cryptsetup-pre.target static - cryptsetup.target static - ctrl-alt-del.target alias - default.target alias - emergency.target static - exit.target disabled disabled factory-reset.target static - final.target static - first-boot-complete.target static - getty-pre.target static - getty.target static - graphical.target static - halt.target disabled disabled hibernate.target static - hybrid-sleep.target static - initrd-fs.target static - initrd-root-device.target static - initrd-root-fs.target static - initrd-switch-root.target static - initrd-usr-fs.target static - initrd.target static - integritysetup-pre.target static - integritysetup.target static - kexec.target disabled disabled local-fs-pre.target static - local-fs.target static - multi-user.target static - nss-lookup.target static - nss-user-lookup.target static - paths.target static - poweroff.target disabled disabled printer.target static - reboot.target disabled enabled remote-cryptsetup.target disabled enabled remote-fs-pre.target static - remote-fs.target enabled enabled remote-veritysetup.target disabled enabled rescue-ssh.target static - rescue.target static - rpcbind.target static - runlevel0.target alias - runlevel1.target alias - runlevel2.target alias - runlevel3.target alias - runlevel4.target alias - runlevel5.target alias - runlevel6.target alias - shutdown.target static - sigpwr.target static - sleep.target static - slices.target static - smartcard.target static - sockets.target static - sound.target static - suspend-then-hibernate.target static - suspend.target static - swap.target static - sysinit.target static - system-update-pre.target static - system-update.target static - time-set.target static - time-sync.target static - timers.target static - umount.target static - usb-gadget.target static - veritysetup-pre.target static - veritysetup.target static - apt-daily-upgrade.timer enabled enabled apt-daily.timer enabled enabled dpkg-db-backup.timer enabled enabled e2scrub_all.timer enabled enabled fstrim.timer enabled enabled logrotate.timer enabled enabled man-db.timer enabled enabled 241 unit files listed. root@le:~#
厉害
@fengzone #10 很久没用了，我的意思是这样吃灰不管会不会受到攻击
标记一处地点
无脑重装就行了
越老的越容易出问题
e7260c1b6a0e932a28e36e835f15b01f2109fdce6f835b6fec74594a46fd94f0 查了一下中招了一半
阅
https://blog.songhappy.cn/posts/fksrun/
这是病毒作者？
root@le:~# systemctl list-unit-files --all | grep -v -E "^(dev-|proc-|sys-|run-|snap.|-.mount|systemd-|dbus|ssh|cron|rsyslog|network|docker|containerd|nginx|apache|mysql|php|redis)" | grep -v "^$"
UNIT FILE STATE PRESET
media-cdrom0.mount generated -
session-27.scope transient -
session-29.scope transient -
session-31.scope transient -
session-32.scope transient -
apparmor.service enabled enabled
apt-daily-upgrade.service static -
apt-daily.service static -
[email protected] alias -
console-getty.service disabled disabled
console-setup.service enabled enabled
[email protected] static -
cryptdisks-early.service masked enabled
cryptdisks.service masked enabled
debug-shell.service disabled disabled
dpkg-db-backup.service static -
[email protected] static -
e2scrub_all.service static -
[email protected] static -
e2scrub_reap.service enabled enabled
emergency.service static -
fail2ban.service enabled enabled
fstrim.service static -
getty-static.service static -
[email protected] enabled enabled
hermes-gateway.service enabled enabled
hwclock.service masked enabled
hysteria-server.service enabled enabled
[email protected] disabled enabled
[email protected] static -
ifupdown-pre.service static -
ifupdown-wait-online.service disabled enabled
initrd-cleanup.service static -
initrd-parse-etc.service static -
initrd-switch-root.service static -
initrd-udevadm-cleanup-db.service static -
ip6tables.service alias -
iptables.service alias -
keyboard-setup.service enabled enabled
kmod-static-nodes.service static -
kmod.service alias -
logrotate.service static -
man-db.service static -
[email protected] static -
netfilter-persistent.service enabled enabled
nezha-agent.service enabled enabled
nftables.service disabled enabled
pam_namespace.service static -
procps.service alias -
qemu-guest-agent.service static -
quotaon.service static -
rc-local.service enabled enabled
rc.service masked enabled
rcS.service masked enabled
rescue.service static -
[email protected] disabled enabled
sudo.service masked enabled
system-update-cleanup.service static -
udev.service alias -
[email protected] static -
[email protected] static -
x11-common.service masked enabled
xray.service enabled enabled
machine.slice static -
system-systemd\x2dcryptsetup.slice static -
user.slice static -
syslog.socket static -
swapfile.swap generated -
basic.target static -
[email protected] static -
bluetooth.target static -
boot-complete.target static -
cryptsetup-pre.target static -
cryptsetup.target static -
ctrl-alt-del.target alias -
default.target alias -
emergency.target static -
exit.target disabled disabled
factory-reset.target static -
final.target static -
first-boot-complete.target static -
getty-pre.target static -
getty.target static -
graphical.target static -
halt.target disabled disabled
hibernate.target static -
hybrid-sleep.target static -
initrd-fs.target static -
initrd-root-device.target static -
initrd-root-fs.target static -
initrd-switch-root.target static -
initrd-usr-fs.target static -
initrd.target static -
integritysetup-pre.target static -
integritysetup.target static -
kexec.target disabled disabled
local-fs-pre.target static -
local-fs.target static -
multi-user.target static -
nss-lookup.target static -
nss-user-lookup.target static -
paths.target static -
poweroff.target disabled disabled
printer.target static -
reboot.target disabled enabled
remote-cryptsetup.target disabled enabled
remote-fs-pre.target static -
remote-fs.target enabled enabled
remote-veritysetup.target disabled enabled
rescue-ssh.target static -
rescue.target static -
rpcbind.target static -
runlevel0.target alias -
runlevel1.target alias -
runlevel2.target alias -
runlevel3.target alias -
runlevel4.target alias -
runlevel5.target alias -
runlevel6.target alias -
shutdown.target static -
sigpwr.target static -
sleep.target static -
slices.target static -
smartcard.target static -
sockets.target static -
sound.target static -
suspend-then-hibernate.target static -
suspend.target static -
swap.target static -
sysinit.target static -
system-update-pre.target static -
system-update.target static -
time-set.target static -
time-sync.target static -
timers.target static -
umount.target static -
usb-gadget.target static -
veritysetup-pre.target static -
veritysetup.target static -
apt-daily-upgrade.timer enabled enabled
apt-daily.timer enabled enabled
dpkg-db-backup.timer enabled enabled
e2scrub_all.timer enabled enabled
fstrim.timer enabled enabled
logrotate.timer enabled enabled
man-db.timer enabled enabled
241 unit files listed.
root@le:~#
@imsnail #18 应该不是，博客内容跟这次攻击牛马不相干哈