Original Summary

crypto？ 这个是挖矿的进程吗？ 看看你们的oracle服务器上是否也有？ 37 root 25 5 0 0 0 S 0.0 0.0 0:00.00 ksmd 38 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 crypto 46 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kthrotld 48 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kmpath_rdacd 49 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kaluad 50 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kpsmoused 52 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 ipv6_addrconf [root@qiao-centos7 share]# ps -ef | grep crypto root 38 2 0 Jun06 ? 00:00:00 [crypto] root 17234 17118 0 22:33 pts/0 00:00:00 grep --color=auto crypto [root@qiao-centos7 share]# lsof -p 38 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME crypto 38 root cwd DIR 8,3 4096 96 / crypto 38 root rtd DIR 8,3 4096 96 / crypto 38 root txt unknown /proc/38/exe [root@qiao-centos7 share]# netstat -anptl Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:111 0.0.0.0: LISTEN 956/rpcbind tcp 0 0 0.0.0.0:6999 0.0.0.0: LISTEN 1640/sshd tcp 0 0 127.0.0.1:25 0.0.0.0: LISTEN 1642/master tcp 0 36 10.0.0.48:6999 27.12.103.187:56254 ESTABLISHED 17046/sshd: opc [pr tcp6 0 0 :::111 ::: LISTEN 956/rpcbind tcp6 0 0 :::34899 ::: LISTEN 1366/v2ray tcp6 0 0 :::6999 ::: LISTEN 1640/sshd tcp6 0 0 ::1:25 :::* LISTEN 1642/master [root@qiao-centos7 share]# rm -rf /proc/38/exe rm: cannot remove ‘/proc/38/exe’: Permission denied 4 个帖子 - 3 位参与者 阅读完整话题

  • 情报分类：服务器与云资源
  • 分类依据：内容涉及服务器、云资源或网络线路
  • 信息来源：服务器 / LINUX DO - 最新话题
  • 发布时间：2026/10/17 22:48:45