A database server in Jinshan fell

Originally, xss played the pps back-end blindly. The most embarrassing thing in life was that the back-end was successful while the back-end was on the Intranet. So I was angry to find a machine in the same segment C, I accidentally got a server from Kingsoft.

I have nothing to do, just ask for a gift.
1. The IP address is faulty.
222.73.48.67 check whether port 80 is enabled. When the browser accesses the port, the upper left corner of the page suddenly says KINGSOFT.

2. Kingsoft prefers to use jboss. Two jboss servers are available in front of Kingsoft, and the results are deleted. I also read the following:

3. I don't know much about it. Just take a look at it:

4. SQL SERVER database

5. this information alone cannot prove to be Kingsoft's server, right? I flipped through the files on the machine. Please forgive me for not being malicious, root. histroy contains Command records, look

6. For Mao said it was a database server, as shown in the figure:

7. In addition, there are multiple backdoors on the machine:

Solution:


1. The jboss backend is also a big deal. Please delete it!
2. Do you need a comprehensive check?