我的也是,nextjs 项目目录下多了
sex.sh 、xmrig 这几个文件,这是 pm2 日志记录,也不知道怎么攻击的
2025-12-05T13:20:27: --2025-12-05 13:18:47-- http://46.36.37.85:12000/
sex.sh2025-12-05T13:20:27: Connecting to 46.36.37.85:12000... connected.
2025-12-05T13:20:27: HTTP request sent, awaiting response... 200 OK
2025-12-05T13:20:27: Length: 1621 (1.6K) [application/x-sh]
2025-12-05T13:20:27: Saving to: ‘
sex.sh’
2025-12-05T13:20:27:
2025-12-05T13:20:27: 0K . 100% 171M=0s
2025-12-05T13:20:27:
2025-12-05T13:20:27: 2025-12-05 13:18:47 (171 MB/s) - ‘
sex.sh’ saved [1621/1621]
2025-12-05T13:20:27:
2025-12-05T13:20:27: % Total % Received % Xferd Average Speed Time Time Time Current
2025-12-05T13:20:27: Dload Upload Total Spent Left Speed
2025-12-05T13:20:27:
98 3439k 98 3400k 0 0 35755 0 0:01:38 0:01:37 0:00:01 26312
99 3439k 99 3426k 0 0 35697 0 0:01:38 0:01:38 --:--:-- 23629
100 3439k 100 3439k 0 0 35653 0 0:01:38 0:01:38 --:--:-- 24491
2025-12-05T13:20:27: Created symlink /etc/systemd/system/multi-user.target.wants/system-update-service.service → /etc/systemd/system/system-update-service.service.
2025-12-05T13:20:28: --2025-12-05 13:20:27-- http://46.36.37.85:12000/
sex.sh2025-12-05T13:20:28: Connecting to 46.36.37.85:12000... connected.
2025-12-05T13:20:28: HTTP request sent, awaiting response... 200 OK
2025-12-05T13:20:28: Length: 1621 (1.6K) [application/x-sh]
2025-12-05T13:20:28: Saving to: ‘sex.sh.1’
2025-12-05T13:20:28:
2025-12-05T13:20:28: 0K . 100% 198M=0s
2025-12-05T13:20:28:
2025-12-05T13:20:28: 2025-12-05 13:20:27 (198 MB/s) - ‘sex.sh.1’ saved [1621/1621]
2025-12-05T13:20:28: