云盾检测到该异常指令执行|云服务器 ECS - 开发者论坛

李振彬

<div class="f14 mb10" id="read_tpc">
<span style="display:none"> E+g@M8D </span>&nbsp;<br /><span style="display:none"> Vi]W|bP </span>&nbsp;<br /><span style="display:none"> bU:EqW\(^ </span>&nbsp;<br /><span style="display:none"> W~9tKT4 </span>&nbsp;<br />受影响资产<span style="display:none"> .ndC
fdy~ </span>&nbsp;<br /><span style="display:none"> 9V@V6TvW>& </span>&nbsp;<br /><span style="display:none"> +kO!Xc%P& </span>&nbsp;<br />父进程名称<span style="display:none"> /-+xQn] </span>&nbsp;<br />/tmp/.lz1525166785 (deleted)<span style="display:none"> wL
4dTc </span>&nbsp;<br /><span style="display:none"> ,UG
RrS </span>&nbsp;<br />进程名称bash<span style="display:none"> DiwxXqY
</span>&nbsp;<br /><span style="display:none"> *>&lt;F'  </span>&nbsp;<br />进程路径<span style="display:none"> nR}sNl1 </span>&nbsp;<br />/usr/bin/bash<span style="display:none"> 6GSI"M6s </span>&nbsp;<br /><span style="display:none"> >TnTnFWX </span>&nbsp;<br /><span style="display:none"> c[4i9I3v </span>&nbsp;<br />进程id5,417<span style="display:none"> :xv!N*Le </span>&nbsp;<br /><span style="display:none"> au+kNF|Q </span>&nbsp;<br />命令行参数sh -c reSuSEfirewall2 stop &gt; /dev/null<span style="display:none"> C=)A6
;=se </span>&nbsp;<br /><span style="display:none"> B!_mC&lt;*4`X </span>&nbsp;<br />事件说明<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=云盾',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_3">云盾</span>检测到该异常指令执行，请及时排查，如果是您业务需要主动执行，可以忽略该告警。<span style="display:none"> .C(eh
 </span>&nbsp;<br /><span style="display:none"> TKY*`?ct </span>&nbsp;<br /><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=解决方案',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_4">解决方案</span><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=建议',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_2">建议</span>立即及时排查入侵原因。每天收到&nbsp;&nbsp;云盾检测到该异常指令执行 <span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=邮件',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_1">邮件</span>和短信，不知道怎么解决！
</div>
</div>
<!--content_read-->
</td>
</tr>
<tr>