小弟的 OS 為 FC4 版本 進來發現到伺服器資源被吃光,猜測是可能有木馬的情況發是.請問各位學者有遇到類似的情況過嗎?
[root@mail /]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 123.com.tw:51010 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51183 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51182 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51172 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:51170 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51199 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51198 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51196 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51192 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51147 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51145 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51144 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51138 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51136 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51157 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 57 123.com.tw:51118 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:51116 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51132 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 46 123.com.tw:51131 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51129 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51121 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51086 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51084 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51077 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 56 123.com.tw:51101 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51099 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51092 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 0 123.com.tw:58541 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 57 123.com.tw:41747 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:41819 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41837 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41864 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41870 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41858 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41863 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41885 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41891 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41893 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 57 123.com.tw:41905 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:41910 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41934 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41933 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41920 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41944 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41937 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41963 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:41953 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:41952 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:41980 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:59192 thegodshate:afs3-fileserver ESTABLISHED
tcp 0 0 123.com.tw:43356 thegodshate:afs3-fileserver ESTABLISHED
tcp 0 0 123.com.tw:ftp 192.168.0.7:1071 ESTABLISHED
tcp 0 1 123.com.tw:59919 thegodshate:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:59923 thegodshate:afs3-fileserver ESTABLISHED
tcp 0 0 123.com.tw:39177 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 0 123.com.tw:39280 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 56 123.com.tw:51298 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51312 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51316 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51318 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51320 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51323 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51325 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51266 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51267 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51268 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51269 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51271 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51283 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 57 123.com.tw:51246 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:51252 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51259 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 56 123.com.tw:51201 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51205 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 46 123.com.tw:51208 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51216 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51217 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 57 123.com.tw:51219 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:51222 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51227 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51230 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 0 123.com.tw:55310 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51360 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51364 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51366 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51368 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51369 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51371 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51374 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51375 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51377 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51378 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 57 123.com.tw:51328 xxxprodukti:afs3-fileserver LAST_ACK
tcp 0 1 123.com.tw:51329 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 56 123.com.tw:51332 xxxprodukti:afs3-fileserver ESTABLISHED
tcp 0 1 123.com.tw:51339 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51343 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51346 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51349 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 1 123.com.tw:51351 xxxprodukti:afs3-fileserver SYN_SENT
tcp 0 624 123.com.tw:ssh 220-134-230-76.HINET-I:1325 ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 14 [ ] DGRAM 4753 /dev/log
unix 2 [ ] DGRAM 3739 @udevd
unix 3 [ ] STREAM CONNECTED 93627 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 93626
unix 2 [ ] DGRAM 93623
unix 3 [ ] STREAM CONNECTED 93015
unix 3 [ ] STREAM CONNECTED 93014
unix 3 [ ] STREAM CONNECTED 59822 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 59813
unix 2 [ ] DGRAM 59734
unix 3 [ ] STREAM CONNECTED 59513
unix 3 [ ] STREAM CONNECTED 59512
unix 3 [ ] STREAM CONNECTED 25042
unix 3 [ ] STREAM CONNECTED 25041
unix 3 [ ] STREAM CONNECTED 14447
unix 3 [ ] STREAM CONNECTED 14446
unix 2 [ ] DGRAM 5068
unix 3 [ ] STREAM CONNECTED 5034 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 5033
unix 2 [ ] DGRAM 5030
unix 3 [ ] STREAM CONNECTED 5029 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 5028
unix 2 [ ] DGRAM 5025
unix 3 [ ] STREAM CONNECTED 5024 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 5023
unix 2 [ ] DGRAM 5020
unix 3 [ ] STREAM CONNECTED 5019 /var/run/dovecot-login/default
unix 3 [ ] STREAM CONNECTED 5018
unix 2 [ ] DGRAM 5015
unix 2 [ ] DGRAM 5009
unix 3 [ ] STREAM CONNECTED 5008
unix 3 [ ] STREAM CONNECTED 5007
unix 3 [ ] STREAM CONNECTED 5006
unix 3 [ ] STREAM CONNECTED 5005
unix 3 [ ] STREAM CONNECTED 5002
unix 3 [ ] STREAM CONNECTED 5001
unix 3 [ ] STREAM CONNECTED 4998
unix 3 [ ] STREAM CONNECTED 4997
unix 3 [ ] STREAM CONNECTED 4996
unix 3 [ ] STREAM CONNECTED 4995
unix 2 [ ] DGRAM 4984
unix 2 [ ] DGRAM 4869
unix 2 [ ] DGRAM 4774
unix 2 [ ] DGRAM 4756