排查思路的参考文章 https://www.icode9.com/content-4-1172475.html
排查经过：
902 top
903 kill -9 18638
904 kill -9 14110
905 top
906 /var/spool/cron/
907 cd /var/spool/cron/
908 ls
909 ls -la
910 cat confluence
911 rm -rf confluence
912 ls -la
913 cat vim /home/confluence5/.bash_profile
914 cd /home/confluence/.bash_profile
915 vi /home/confluence/.bash_profile
916 ls
917 ls -la
918 cat confluence
919 top
920 ps aux –sort=-%cpu
921 ll /proc/13843/exe
922 cd /opt/atlassian/confluence/bin/
923 ls -la
924 cd .git/
925 ls
926 ls -la
927 cd dbus
928 ls
929 ls -la
930 pwd
931 ll /proc/13843/exe
932 cd /opt/atlassian/confluence/bin/
933 rm -rf .git
934 top
935 kill -9 13843
936 top
937 kill -9 18253
938 top
939 ls -la
940 ll /proc/13843/exe
941 top
942 ll /proc/18342/exe
943 cd /opt/atlassian/confluence/confluence/
944 ls
945 cd META-INF/
946 LS
947 ls
948 ls -la
949 cd maven/
950 ls
951 cd ..
952 rm -rf /opt/atlassian/confluence/confluence/META-INF/
953 top
954 ll /proc/18342/exe
955 ll /proc/13910/exe
956 cd /opt/atlassian/confluence/confluence/
957 ls
958 cd admin
959 ls
960 ls -la
961 cat default.jsp
962 ll /proc/13910/exe
963 cd /opt/atlassian/confluence/confluence/admin/trust/
964 ls
965 top
966 ll /proc/13910/exe
967 cd /opt/atlassian/confluence/
968 ls -la
969 top
970 ll /proc/18342/exe
971 kill -9 18342
972 top
973 ll /proc/13910/exe
974 kill -9 13910
975 top
976 ll /proc/20554/exe
977 cd /opt/atlassian/confluence/
978 ls
979 TOP
980 top
981 kill -9 20554
982 top
983 ll /proc/20799/exe
984 cd /opt/atlassian/confluence/
985 ls
986 rm -rf /opt/atlassian/confluence/confluence/image
987 kill -9
988 top
989 kill -9 20799
990 kill -9 20784
991 ll /proc/20885/exe
992 kill -9 20885
993 top
994 ll /proc/21399/exe
995 rm -rf /opt/atlassian/confluence/confluence/admin
996 kill -9 21399
997 top
998 ll /proc/21472/exe
999 reboot
1000 top
1001 ll /proc/1992/exe
1002 system status jira
1003 systemctl status jira
1004 systemctl stop jira
1005 systemctl stop confluence
1006 top
1007 ll /proc/1992/exe
1008 rm -rf /opt/atlassian/confluence/images
1009 kill -9 1992
1010 top
1011 ll /proc/1976/exe
1012 kill -9 1976
1013 top
1014 ll /proc/3724/exe
1015 cd /opt/atlassian/confluence/confluence/includes
1016 ls
1017 ls -la
1018 rm -rf /opt/atlassian/confluence/confluence/includes/css
1019 ls -la
1020 rm -rf /opt/atlassian/confluence/confluence/includes/js
1021 cd /opt/atlassian/confluence/confluence/includes/
1022 ls -la
1023 rm 0rf soy/
1024 cd -rf soy/
1025 rm -rf soy/
1026 rm -rf permissions/
1027 rm -rf fancybox/
1028 rm -rf components/
1029 ls -la
1030 cat blank.vm
1031 cat skiplinked-section.vm
1032 top
1033 kill -9 3724
1034 top
1035 ll /proc/4987/exe
1036 rm -rf /home/confluence/.java/
1037 ls -la
1038 top
1039 kill -9 4987
1040 top
1041 ll /proc/3892/exe
1042 rm -rf /opt/atlassian/confluence/confluence/WEB-INF
1043 kill -9 3892
1044 top
1045 ll /proc/5326/exe
1046 cd /opt/atlassian/confluence/
1047 ls -la
1048 rm -rf work/
1049 rm -rf logs/ .install4j/ conf/ bin/ confluence/
1050 ls -la
1051 rm -rf temp/
1052 l s-la
1053 ls -la
1054 top
1055 kill -9 5326
1056 kill -9 5624
1057 top
1058 ll /proc/6172/exe
1059 cd /home/confluence/
1060 ls -la
1061
1062 rm -rf .cache/
1063 ls -la
1064 top
1065 trm -rf 6172
1066 kill -9 6172
1067 top
1068 ls
1069 pwd
1070 ls -la
1071 cd /opt/atlassian/confluence/
1072 ls -al
1073 ls -la
1074 top
1075 history