{"id":41802,"date":"2016-07-15T09:50:07","date_gmt":"2016-07-15T01:50:07","guid":{"rendered":"http:\/\/www.xyryd.com\/?p=41802"},"modified":"2019-04-29T16:53:49","modified_gmt":"2019-04-29T08:53:49","slug":"%e7%99%be%e5%ba%a6%e5%bc%80%e6%94%be%e4%ba%91-%e4%ba%91%e6%9c%8d%e5%8a%a1%e5%99%a8bcc-usrbinhost%e8%bf%9b%e7%a8%8b-%e8%b4%9f%e8%bd%bd%e7%aa%81%e7%84%b6%e6%a0%87%e9%ab%98-%e7%bd%91%e7%ab%99%e6%97%a0","status":"publish","type":"post","link":"http:\/\/www.xyryd.com\/41802.html","title":{"rendered":"\u767e\u5ea6\u5f00\u653e\u4e91 \u4e91\u670d\u52a1\u5668BCC \/usr\/bin\/host\u8fdb\u7a0b \u8d1f\u8f7d\u7a81\u7136\u6807\u9ad8 \u7f51\u7ad9\u65e0\u6cd5\u6253\u5f00 \u89e3\u51b3\u65b9\u6848"},"content":{"rendered":"<p>\u4eca\u65e5<a href=\"http:\/\/xyryd.com\/10.html\">\u642c\u74e6\u5de5\u4f18\u60e0\u7801<\/a>\u7f51\u7ad9\u540e\u53f0\u7a81\u7136\u65e0\u6cd5\u6253\u5f00\uff0c\u7136\u540e\u67e5\u770b\u76d1\u63a7CPU\u4f7f\u7528\u7387\u8fbe\u5230\u4e86100%\uff0c\u7136\u540e\u4f7f\u7528top\u547d\u4ee4\uff0c\u67e5\u770b\u540e\u53d1\u73b0 \/usr\/bin\/host \u8fd9\u4e2a\u8fdb\u7a0b\u7a81\u7136\u5f88\u5360\u5185\u5b58\u8ddfCPU<\/p>\n<pre><code>www-data  7300 10.8  0.1 2122900 18768 ?       Ssl  Jul11 121:47 \/usr\/bin\/host<\/code><\/pre>\n<p>\u7136\u540e\u7acb\u523b\u4f7f\u7528kill -9 \u547d\u4ee4\uff0c\u6740\u6b7b\u76f8\u5173\u8fdb\u7a0b\u3002<br \/>\n\u67e5\u770b \u7f51\u7ad9\u8bbf\u95ee\u65e5\u5fd7\u4e5f\u6ca1\u6709\u53d1\u73b0\u76f8\u5173\u53ef\u4ee5\u3002<br \/>\n\u7136\u540e\u7acb\u523b\u4f7f\u7528w\u547d\u4ee4\uff0c\u68c0\u67e5\u6700\u8fd1\u767b\u5f55\u7684IP\u5730\u5740\uff0c\u5e76\u6ca1\u6709\u53d1\u73b0\u53ef\u7591\u3002<br \/>\n\u540e\u6765\u901a\u8fc7\u8c37\u6b4c\uff08\u767e\u5ea6\u5c45\u7136\u641c\u4e0d\u5230\u76f8\u5173\u5185\u5bb9\uff0c\u8fd9\u91cc\u9119\u89c6\u4e00\u4e0b\uff09\u540e\u53d1\u73b0\u522b\u4eba\u4e5f\u6709\u8fd9\u79cd\u60c5\u51b5\uff0c\u5730\u5740\uff1a<br \/>\nhttp:\/\/serverfault.com\/questions\/705217\/usr-bin-host-executed-by-hacked-php-script<br \/>\n\u7136\u540e\u6211\u4eec\u68c0\u7d22\u4e00\u4e0b\u7f51\u7ad9\u6587\u4ef6\u5939,\u67e5\u627e\u540d\u79f0\u4e3a libwordker.so\u7684\u6587\u4ef6\uff0c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n<pre> grep -rn 'libworker.so' www-jiloc-com\/<\/pre>\n<p><br \/>\n\u5c45\u7136\u8fd8\u771f\u7684\u662f\u627e\u5230\u4e86\u76f8\u5173\u5185\u5bb9\u3002\u679c\u65ad\u66f4\u6362\u4e3b\u9898\u5220\u9664\u6b64\u6587\u4ef6\u5939\u3002<br \/>\n\u8fd9\u4e0d\u662fWordpress\u7b2c\u4e00\u6b21\u88ab\u9ed1\u4e86\uff0c\u5de7\u7684\u662f\u6211\u4eec\u53e6\u4e00\u4e2a\u535a\u5ba2\u4f7f\u7528\u7684\u4e5f\u662ftwentytwelve\u4e3b\u9898\u3002\u771f\u7684\u6000\u7591?twentytwelve \u4e3b\u9898\u662f\u4e0d\u662f\u5b58\u5728\u6f0f\u6d1e\u3002<br \/>\n<span style=\"color: #ff0000;\">\u5efa\u8bae\u5927\u5bb6\u4e0d\u8981\u518d\u4f7f\u7528?twentytwelve \u4e3b\u9898\u4e86\uff0c\u53ef\u80fd\u771f\u7684\u5b58\u5728\u6f0f\u6d1e\u3002<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4eca\u65e5\u642c\u74e6\u5de5\u4f18\u60e0\u7801\u7f51\u7ad9\u540e\u53f0\u7a81\u7136\u65e0\u6cd5\u6253\u5f00\uff0c\u7136\u540e\u67e5\u770b\u76d1\u63a7CPU\u4f7f\u7528\u7387\u8fbe\u5230\u4e86100%\uff0c\u7136\u540e\u4f7f\u7528top\u547d\u4ee4\uff0c\u67e5\u770b\u540e\u53d1\u73b0  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"single-with-sidebar","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/posts\/41802"}],"collection":[{"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/comments?post=41802"}],"version-history":[{"count":0,"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/posts\/41802\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/media?parent=41802"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/categories?post=41802"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xyryd.com\/wp-json\/wp\/v2\/tags?post=41802"}],"curies":[{"name":"wp","href":"http:\/\/api.w.org\/{rel}","templated":true}]}}