How to completely uninstall Alibaba Cloud Shield (Server Knight) and block Alibaba Cloud Shield IP

Alibaba Cloud Shield (AliYunDun), also known as Alibaba Cloud Security Knight, is Alibaba Cloud's own cloud monitoring software that automatically helps you monitor the status of Alibaba Cloud hosts or lightweight application hosts, and monitors whether your host has any violations. process and send you a warning email. This article introduces the following steps to completely uninstall the Alibaba Cloud Shield service, clear the Alibaba Cloud Shield file residue, and block the Alibaba Cloud Shield IP.

What is Alibaba Cloud Shield

Alibaba Cloud Shield (AliYunDun), also known as Server Guard, is a product that comes with the purchase of Alibaba Cloud products to monitor the security of cloud hosts/lightweight application hosts. It can automate real-time intrusion threat detection, virus killing, and intelligent vulnerability repair. , baseline one-click verification and other functions, but it will also monitor whether your host has any illegal processes, and then you will receive an "Alibaba Cloud warning email".

Alibaba Cloud Shield mainly includes three processes: AliYunDun, aliyun-service and AliYunDunUpdate.

How to completely uninstall Alibaba Cloud Shield

Uninstall Alibaba Cloud Shield

After remotely connecting to the Alibaba Cloud cloud host or lightweight application host, execute the following code to uninstall Alibaba Cloud Shield:

wget http://update.aegis.aliyun.com/download/uninstall.sh chmod +x uninstall.sh ./uninstall.sh wget http://update.aegis.aliyun.com/download/quartz_uninstall.sh chmod +x quartz_uninstall.sh ./quartz_uninstall.sh

Delete Alibaba Cloud Shield file residue

After uninstalling Alibaba Cloud Shield, execute the following code to delete the remaining Alibaba Cloud Shield files:

pkill aliyun-service rm -fr /etc/init.d/agentwatch /usr/sbin/aliyun-service rm -rf /usr/local/aegis*

Block Alibaba Cloud Shield IP

The last step is to block Alibaba Cloud Shield’s IP:

iptables -I INPUT -s 140.205.201.0/28 -j DROP iptables -I INPUT -s 140.205.201.16/29 -j DROP iptables -I INPUT -s 140.205.201.32/28 -j DROP iptables -I INPUT -s 140.205.225.192/29 -j DROP iptables -I INPUT -s 140.205.225.200/30 -j DROP iptables -I INPUT -s 140.205.225.184/29 -j DROP iptables -I INPUT -s 140.205.225.183/32 -j DROP iptables -I INPUT -s 140.205.225.206/32 -j DROP iptables -I INPUT -s 140.205.225.205/32 -j DROP iptables -I INPUT -s 140.205.225.195/32 -j DROP iptables -I INPUT -s 140.205.225.204/32 -j DROP

Check whether Alibaba Cloud Shield is cleanly uninstalled

Finally, check whether the Alibaba Cloud Shield on your host has been uninstalled cleanly. The main purpose is to check whether there are any Alibaba Cloud Shield-related processes (AliYunDun, aliyun-service and AliYunDunUpdate) in the process. You can use ps -aux | grep - E 'aliyun|AliYunDun' to check. If there are no related processes, it means that Alibaba Cloud Shield has been uninstalled.

Recommended site searches: US virtual host purchase, la domain name, vps server rental, free virtual host, foreign domain name, Wanwang space management, how to rent a foreign server, US server, all-round virtual host, domain name registration service,