{"id":585,"date":"2012-02-15T12:44:15","date_gmt":"2012-02-15T04:44:15","guid":{"rendered":"http:\/\/blog.dword1511.info\/?p=585"},"modified":"2012-02-15T12:53:38","modified_gmt":"2012-02-15T04:53:38","slug":"%e7%bb%a7-wordpress-%e4%b8%bb%e9%a2%98%e6%89%ab%e6%8f%8f%e4%b9%8b%e5%90%8e%e5%8f%88%e5%87%ba%e7%8e%b0%e4%ba%86%e6%8f%92%e4%bb%b6%e6%89%ab%e6%8f%8f","status":"publish","type":"post","link":"http:\/\/blog.dword1511.info\/?p=585","title":{"rendered":"\u7ee7 WordPress \u4e3b\u9898\u626b\u63cf\u4e4b\u540e\u53c8\u51fa\u73b0\u4e86\u63d2\u4ef6\u626b\u63cf"},"content":{"rendered":"

\u65e5\u5fd7\u5982\u4e0b\uff1a<\/p>\n

[Tue Feb 14 16:32:15 2012] [error] [client 91.196.216.59] File does not exist: \/var\/www\/blog.dword1511.info\/wp-content\/plugins\/ANNOtype<\/p><\/blockquote>\n

\u8fd9\u6b21\u653b\u51fb\u8005\u5f88\u806a\u660e\uff0c\u4ed6\u6ca1\u6709\u4e00\u6b21\u628a\u6240\u6709\u6709\u95ee\u9898\u7684\u63d2\u4ef6\u626b\u63cf\u5b8c\uff0c\u800c\u662f\u53ea\u626b\u4e86\u4e00\u4e2a\uff0c\u4e0d\u5bb9\u6613\u88ab\u53d1\u73b0\uff0c\u4e5f\u4e0d\u5bb9\u6613\u5168\u519b\u8986\u6ca1\u3002<\/p>\n

\u4e0d\u8fc7\u7b2c\u4e00\u6b21\u626b themes \u7684 IP \u6b63\u662f\u8fd9\u4e2a IP \uff0c91.196.216.59 \u3002\u5982\u679c\u8fd9\u4e0d\u662f\u53f0\u8089\u673a\u7684\u8bdd\uff08\u72af\u8fd9\u79cd\u9519\u8bef\u6709\u70b9\u4e25\u91cd\uff09\u2026\u2026<\/p>\n

dword@dword1511:~$ nslookup 91.196.216.59 8.8.8.8
\nServer: \u00a0 \u00a0 \u00a0 \u00a0 8.8.8.8
\nAddress: \u00a0 \u00a0 \u00a0 \u00a08.8.8.8#53
\n** server can’t find 59.216.196.91.in-addr.arpa: SERVFAIL<\/p><\/blockquote>\n

\u4f60\u60f3\u89e3\u6790\u5c45\u7136 SERVFAIL \u4e86\uff0c\u6709\u95ee\u9898\u3002<\/p>\n

dword@dword1511:~$ traceroute 91.196.216.59
\ntraceroute to 91.196.216.59 (91.196.216.59), 30 hops max, 60 byte packets
\n[……]
\n4 10gigabitethernet1-2.core1.lon1.he.net (72.52.92.242) 134.037 ms 133.980 ms 134.297 ms
\n5 1Gbrnlinx-ex.citytelecom.ru (195.66.225.48) 147.495 ms 148.049 ms 148.552 ms
\n6 te4-2-740-altera.spb.citytelecom.ru (217.65.1.229) 183.476 ms 174.466 ms 174.116 ms
\n7 te4-4-adelaida.spb.citytelecom.ru (217.65.1.201) 175.722 ms 175.790 ms 175.708 ms
\n8 62.152.42.134 (62.152.42.134) 174.795 ms 174.794 ms 174.778 ms
\n9 91.196.216.59 (91.196.216.59) 216.566 ms 217.322 ms *<\/p><\/blockquote>\n

\u8c8c\u4f3c\u6765\u81ea\u9ed1\u5ba2\u5927\u56fd\u4fc4\u7f57\u65af\u3002<\/p>\n

dword@dword1511:~$ whois 91.196.216.59
\n% This is the RIPE Database query service.
\n% The objects are in RPSL format.
\n%
\n% The RIPE Database is subject to Terms and Conditions.
\n% See http:\/\/www.ripe.net\/db\/support\/db-terms-conditions.pdf
\n% Note: this output has been filtered.
\n% To receive output for a database update, use the “-B” flag.
\n% Information related to ‘91.196.216.0 – 91.196.219.255’
\ninetnum: 91.196.216.0 – 91.196.219.255
\nnetname: SPETSENERGO-NET
\ndescr: SpetsEnergo Ltd.
\ncountry: RU
\norg: ORG-SL138-RIPE
\nadmin-c: KDS23-RIPE
\ntech-c: KDS23-RIPE
\nremarks: SPAM issues: abuse@specenergo2.ru
\nremarks: Network security issues: abuse@specenergo2.ru
\nremarks: General and other information: info@specenergo2.ru
\nstatus: ASSIGNED PI
\nmnt-by: RIPE-NCC-END-MNT
\nmnt-by: MNT-SPETSENERGO
\nmnt-lower: RIPE-NCC-END-MNT
\nmnt-routes: MNT-SPETSENERGO
\nmnt-domains: MNT-SPETSENERGO
\nsource: RIPE # Filtered<\/p>\n

organisation: ORG-SL138-RIPE
\norg-name: SpetsEnergo Ltd.
\ntech-c: KDS23-RIPE
\nadmin-c: KDS23-RIPE
\nremarks: SPAM issues: abuse@specenergo2.ru
\nremarks: Network security issues: abuse@specenergo2.ru
\nremarks: General and other information: info@specenergo2.ru
\norg-type: OTHER
\naddress: Russia, 127422, Moscow, Timiryazevskaya st, 11
\nmnt-ref: MNT-SPETSENERGO
\nmnt-by: MNT-SPETSENERGO
\nsource: RIPE # Filtered<\/p>\n

person: Kruchkov Dmitry Sergeevich
\naddress: Russia, 127422, Moscow, Timiryazevskaya st, 11
\nabuse-mailbox: abuse@specenergo2.ru
\nphone: +7 916 959 2268
\nnic-hdl: KDS23-RIPE
\nsource: RIPE # Filtered
\nmnt-by: MNT-SPETSENERGO<\/p>\n

% Information related to ‘91.196.216.0\/22AS43239’<\/p>\n

route: 91.196.216.0\/22
\ndescr: SPETSENERGO
\norigin: AS43239
\nmnt-by: MNT-SPETSENERGO
\nsource: RIPE # Filtered<\/p><\/blockquote>\n

\u786e\u5b9e\u662f\u4fc4\u7f57\u65af\u7684\uff0c\u4e0d\u8fc7\u5bf9\u90a3\u8fb9\u7684\u8fd0\u8425\u5546\u4e0d\u719f\u6089\u3002<\/p>\n

\u540e\u6765 Google \u4e86\u4e00\u4e0b\uff0c\u8fd9\u4e2a IP \u66fe\u7ecf\u6ce8\u518c\u8fc7 N \u591a\u514d\u8d39\u7684\u57df\u540d\uff0c\u800c\u4e14\u6709\u8fc7\u5404\u79cd\u67b6\u8bbe malware \u7684\u5386\u53f2\uff0c\u65e9\u5c31\u81ed\u540d\u662d\u8457\u4e86\u3002<\/p>\n

PS\uff1a\u987a\u4fbf\u5410\u69fd\u4e0b \ufeff\ufeff58.218.199.227 \u8fd9\u4e2a IP \uff0c\u6c5f\u82cf\u7535\u4fe1\u7684\uff0c\u603b\u60f3\u628a\u6211\u7684\u673a\u5668\u5f53 HTTP \u4ee3\u7406\u4f7f\u5524\u3002\u4e0d\u6392\u9664\u662f\u67d0\u54d4\u2014\u2014 \u7684\u626b\u63cf\u5668\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u65e5\u5fd7\u5982\u4e0b\uff1a [Tue Feb 14 16:32:15 2012] [error] [client 91.196 … \u7ee7\u7eed\u9605\u8bfb\u7ee7 WordPress \u4e3b\u9898\u626b\u63cf\u4e4b\u540e\u53c8\u51fa\u73b0\u4e86\u63d2\u4ef6\u626b\u63cf<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[10],"tags":[],"_links":{"self":[{"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/posts\/585"}],"collection":[{"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=585"}],"version-history":[{"count":4,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/posts\/585\/revisions"}],"predecessor-version":[{"id":587,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=\/wp\/v2\/posts\/585\/revisions\/587"}],"wp:attachment":[{"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=585"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.dword1511.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}