Linus的FUN天地

Loading search…

The search index is generated after the build. Run pnpm build, then preview.

 中

Uninstalling Alibaba Cloud Monitoring and Blocking Cloud Shield IPs

Published Updated Reading time: 1 min read Categories: Tech

Machine-translated (anthropic, claude-haiku-5-5) from the Chinese original. Read the original in 中文

Contents

Preface

I'm sure you've all noticed that after booting a cloud server bought from Alibaba Cloud, the processes include AliYunDun, aliyun-service, and AliYunDunUpdate.

These are actually Alibaba Cloud Security (Aegis, 安骑士). They monitor whether the cloud server is secure, can automatically scan for and kill viruses, and can also detect whether the server is running prohibited processes. As for the "Cloud Shield IP" — it is a vulnerability scanner from Alibaba Cloud, mainly used to check whether your server has known vulnerabilities. Alibaba Cloud Security (Aegis) has its benefits and drawbacks. The benefit is that it guarantees your server's security to some extent (though probably not by much). The drawback is that it monitors your cloud server around the clock, so you have essentially no privacy at all — it not only monitors for viruses but also monitors the content you store.

So uninstall the built-in Alibaba Cloud Security (Aegis)! The method is simple: just run the following three commands.

Commands

Uninstall Aegis:

text
wget http://update.aegis.aliyun.com/download/uninstall.sh
chmod +x uninstall.sh
./uninstall.sh
wget http://update.aegis.aliyun.com/download/quartz_uninstall.sh
chmod +x quartz_uninstall.sh
./quartz_uninstall.sh

Delete leftover files:

text
pkill aliyun-service
rm -fr /etc/init.d/agentwatch /usr/sbin/aliyun-service
rm -rf /usr/local/aegis*

Block the Cloud Shield IP:

text
iptables -I INPUT -s 140.205.201.0/28 -j DROP
iptables -I INPUT -s 140.205.201.16/29 -j DROP
iptables -I INPUT -s 140.205.201.32/28 -j DROP
iptables -I INPUT -s 140.205.225.192/29 -j DROP
iptables -I INPUT -s 140.205.225.200/30 -j DROP
iptables -I INPUT -s 140.205.225.184/29 -j DROP
iptables -I INPUT -s 140.205.225.183/32 -j DROP
iptables -I INPUT -s 140.205.225.206/32 -j DROP
iptables -I INPUT -s 140.205.225.205/32 -j DROP
iptables -I INPUT -s 140.205.225.195/32 -j DROP
iptables -I INPUT -s 140.205.225.204/32 -j DROP

Related posts

Comments