# ps aux|grep wPAR
root 23638 12627 0.0 18691368 15432 ? Sl 18:50 3941:56 ./wPARNzNNkF
这个进程会把我的服务器128核CPU全部占满。
在最后一行看到下面信息。
# sudo lsof -p 23638|grep sealos
wPARNzNNk 23638 root 12u IPv4 1646602 0t0 TCP sealos.hub:64590->185.203.119.25:http (ESTABLISHED)
确认一下是否是有安全漏洞。
sealos信息如下：
# sealos version
CriVersionInfo:
RuntimeApiVersion: 1.44.0
RuntimeName: docker
RuntimeVersion: 25.0.5
Version: 0.1.0
KubernetesVersionInfo:
clientVersion:
buildDate: "2023-08-23T23:44:35Z"
compiler: gc
gitCommit: 22a9682c8fe855c321be75c5faacde343f909b04
gitTreeState: clean
gitVersion: v1.24.17
goVersion: go1.20.7
major: "1"
minor: "24"
platform: linux/arm64
kustomizeVersion: v4.5.4
serverVersion:
buildDate: "2023-08-23T23:37:25Z"
compiler: gc
gitCommit: 22a9682c8fe855c321be75c5faacde343f909b04
gitTreeState: clean
gitVersion: v1.24.17
goVersion: go1.20.7
major: "1"
minor: "24"
platform: linux/arm64
SealosVersion:
buildDate: "2023-10-30T16:19:05Z"
compiler: gc
gitCommit: f39b2339
gitVersion: 4.3.7
goVersion: go1.20.10
platform: linux/arm64
目前环境还保留中，我很恐惧。