Best life ever XD Dexaxotheweran 2025-05-04, 12:14 hehe hulikua0 you have to share :P fryseboksj 2025-05-04, 04:25 Looks to good to be true ontsiell 2025-05-04, 02:47 This is prob a scam Sternchenq 2025-05-03, 10:24 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-05, 10:26 hehe hulikua0 you have to share :P fryseboksj 2025-05-05, 02:37 Looks to good to be true ontsiell 2025-05-05, 00:59 This is prob a scam Sternchenq 2025-05-04, 08:36 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-04, 14:09 hehe hulikua0 you have to share :P fryseboksj 2025-05-04, 06:20 Looks to good to be true ontsiell 2025-05-04, 04:42 This is prob a scam Sternchenq 2025-05-03, 12:19 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-04, 16:47 hehe hulikua0 you have to share :P fryseboksj 2025-05-04, 08:58 Looks to good to be true ontsiell 2025-05-04, 07:20 This is prob a scam Sternchenq 2025-05-03, 14:57 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-05, 10:26 hehe hulikua0 you have to share :P fryseboksj 2025-05-05, 02:37 Looks to good to be true ontsiell 2025-05-05, 00:59 This is prob a scam Sternchenq 2025-05-04, 08:36 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-10, 14:16 hehe hulikua0 you have to share :P fryseboksj 2025-05-10, 06:27 Looks to good to be true ontsiell 2025-05-10, 04:49 This is prob a scam Sternchenq 2025-05-09, 12:26 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-05, 22:21 hehe hulikua0 you have to share :P fryseboksj 2025-05-05, 14:32 Looks to good to be true ontsiell 2025-05-05, 12:54 This is prob a scam Sternchenq 2025-05-04, 20:31 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-07, 17:17 hehe hulikua0 you have to share :P fryseboksj 2025-05-07, 09:28 Looks to good to be true ontsiell 2025-05-07, 07:50 This is prob a scam Sternchenq 2025-05-06, 15:27 Ok guys I can uderstand your concerns.

Best life ever XD Dexaxotheweran 2025-05-07, 10:06 hehe hulikua0 you have to share :P fryseboksj 2025-05-07, 02:17 Looks to good to be true ontsiell 2025-05-07, 00:39 This is prob a scam Sternchenq 2025-05-06, 08:16 Ok guys I can uderstand your concerns.

还好这是台闲置的服务器，上面什么东西都没有跑，所以正常来说除了ssh连接之外，这个服务器不该有任何其他的连接，于是我执行了一下 netstat -tanp 看了一眼，发现有个奇怪的进程使用一个境外的IP和我的服务器建立了连接，用 ps -ef 查了一下这个 PID，结果进程名显示为 [kcached] ……这下给我整不会了。 后来查了些资料知道了可以用 lsof -p 查看进程读取的文件，才看到木马的本体： /usr/bin/gs-dbus 。不过如果我只是杀掉这个进程然后删除文件，那攻击者肯定会重新回来，所以我得排除一下是不是还有别的木马文件。 一般来说攻击者权限维持的方式大多是crontab，不过我看了一下配置文件里似乎没有，root下的 authorized_keys 倒是有个陌生的公钥于是顺手删掉了……也没有其他文件夹下有 gs-dbus 文件……难道没有别的木马文件了吗？