{"id":54695,"date":"2020-03-31T23:17:55","date_gmt":"2020-03-31T15:17:55","guid":{"rendered":"http:\/\/4563.org\/?p=54695"},"modified":"2020-03-31T23:17:55","modified_gmt":"2020-03-31T15:17:55","slug":"%e6%88%91%e7%9a%84ks%e8%bf%99%e6%98%af%e6%80%8e%e4%b9%88%e4%ba%86%ef%bc%8c%e6%95%b0%e6%8d%ae%e9%83%bd%e6%b2%a1%e4%ba%86%ef%bc%8c%e6%80%8e%e4%b9%88%e6%81%a2%e5%a4%8d","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=54695","title":{"rendered":"\u6211\u7684KS\u8fd9\u662f\u600e\u4e48\u4e86\uff0c\u6570\u636e\u90fd\u6ca1\u4e86\uff0c\u600e\u4e48\u6062\u590d"},"content":{"rendered":"\n<p>  \t\t\t\t\t<strong>\u5c71\u91ce\u5339\u592b<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:03:54\t<\/p>\n<h3>\u6211\u7684KS\u8fd9\u662f\u600e\u4e48\u4e86\uff0c\u6570\u636e\u90fd\u6ca1\u4e86\uff0c\u600e\u4e48\u6062\u590d<\/h3>\n<p>  \t\t \u672c\u5e16\u6700\u540e\u7531 \u5c71\u91ce\u5339\u592b \u4e8e 2020-3-30 12:52 \u7f16\u8f91 <\/p>\n<p> \u6539\u4e3a\u786c\u76d8\u542f\u52a8\u6b63\u5e38\u4e86\uff0c\u770bKS\u53d1\u7ed9\u6211\u7684\u5de5\u5355\u597d\u50cf\u88ab\u653b\u51fb\u4e86\uff0c\u8fd9\u5bb6\u4e0d\u662f\u625b\u653b\u51fb\u5417<\/p>\n<p>  \u6709\u5565\u89e3\u51b3\u65b9\u5f0f\u5417<\/p>\n<p>  Dear Customer,<\/p>\n<p>  You server xxxx.eu has been placed in &#8216;rescue&#8217; mode in order to prevent further problems.<\/p>\n<p>  You can find a guide to help you complete the maintenance steps needed<br \/>  at the following address:<br \/>  http:\/\/help.ovh.ie\/RescueMode\/<\/p>\n<p>  Please do not hesitate to contact our technical support so that this<br \/>  situation does not become critical.<\/p>\n<p>  You can find the logs brought up by our system below which led to this alert.<\/p>\n<p>  &#8211; START OF ADDITIONAL INFORMATION &#8211;<\/p>\n<p>  Attack detail : 10Kpps\/114Mbps<br \/>  dateTime srcIp:srcPort dstIp:dstPort protocol flags packets bytes reason<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35322 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:35081 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:47063 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:47063 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:47063 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:47063 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:29406 UDP &#8212; 16384 23691264 ATTACK:UDP<br \/>  2020.03.30 02:36:49 CEST x.xxx.xx.xxx:11211 119.28.78.192:43574 UDP &#8212; 16384 23691264 ATTACK:UDP<\/p>\n<p>  &#8211; END OF ADDITIONAL INFORMATION &#8211;<\/p>\n<p>  Kind regards,<\/p>\n<p>  OVH Customer Support<br \/>  Best regards,<\/p>\n<p>  Customer service Kimsufi.com<br \/>  Contact: https:\/\/www.kimsufi.com\/en\/support\/<br \/>  From Monday to Friday: 9:00 &#8211; 17:30  \t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>ncnc<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:07:21\t<\/p>\n<h3><\/h3>\n<p>  \t\t\u4e3a\u5565\u5f00\u4e86&#8217;Rescue&#8217; mode \u597d\u50cf KS\u6ca1\u6cd5\u505a\u955c\u50cf\u5427\u3002\u3002 \u6ca1\u529e\u6cd5\u8fd8\u539f \ud83d\ude41\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u5c71\u91ce\u5339\u592b<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:09:20\t<\/p>\n<h3><\/h3>\n<p>  \t\tncnc \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:07<br \/>  \u4e3a\u5565\u5f00\u4e86&#8217;Rescue&#8217; mode \u597d\u50cf KS\u6ca1\u6cd5\u505a\u955c\u50cf\u5427\u3002\u3002 \u6ca1\u529e\u6cd5\u8fd8\u539f<\/p>\n<p> \u6ca1\u6ce8\u610f\uff0c\u6628\u665a\u597d\u597d\u7684\uff0c\u4eca\u5929\u770b\u5230\u90ae\u4ef6\u600e\u4e48\u91cd\u88c5\u4e86\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u5c71\u91ce\u5339\u592b<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:33:44\t<\/p>\n<h3><\/h3>\n<p>  \t\thelp meyc014t\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>wope<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:38:12\t<\/p>\n<h3><\/h3>\n<p>  \t\t\u662f\u4e0d\u662f\u5f00\u542f\u5b98\u65b9\u81ea\u5e26\u7684\u90a3\u4e2a\u76d1\u63a7\u4e86\uff0c\u542f\u52a8\u4e86\u5e94\u6025\u6a21\u5f0f\u3002\u6570\u636e\u5e94\u8be5\u6ca1\u6709\u4e22\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u5c71\u91ce\u5339\u592b<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:53:28\t<\/p>\n<h3><\/h3>\n<p>  \t\twope \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:38<br \/>  \u662f\u4e0d\u662f\u5f00\u542f\u5b98\u65b9\u81ea\u5e26\u7684\u90a3\u4e2a\u76d1\u63a7\u4e86\uff0c\u542f\u52a8\u4e86\u5e94\u6025\u6a21\u5f0f\u3002\u6570\u636e\u5e94\u8be5\u6ca1\u6709\u4e22<\/p>\n<p> \u73b0\u5728\u6539\u56de\u786c\u76d8\u542f\u52a8\u4e86\u6682\u65f6\u6570\u636e\u6062\u590d\u4e86<\/p>\n<p>  \u88ab\u653b\u51fb\u4e86\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>ncnc<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 13:22:03\t<\/p>\n<h3><\/h3>\n<p>  \t\t\u5c71\u91ce\u5339\u592b \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 12:53<br \/>  \u73b0\u5728\u6539\u56de\u786c\u76d8\u542f\u52a8\u4e86\u6682\u65f6\u6570\u636e\u6062\u590d\u4e86<\/p>\n<p>  \u88ab\u653b\u51fb\u4e86<\/p>\n<p> KS \u4e0d\u6297D\u7684\u5417\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>pslt<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 13:57:39\t<\/p>\n<h3><\/h3>\n<p>  \t\t\u662f\u4e0d\u662f\u4f60\u653b\u51fb\u5225\u4eba\uff1f\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>Nameless<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 14:26:21\t<\/p>\n<h3><\/h3>\n<p>  \t\t\u4f60\u7684 memcached \u88ab\u5229\u7528\u653e\u5927\u653b\u51fb\u4e86\u522b\u4eba\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u5c71\u91ce\u5339\u592b<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 21:26:52\t<\/p>\n<h3><\/h3>\n<p>  \t\tNameless \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-30 14:26<br \/>  \u4f60\u7684 memcached \u88ab\u5229\u7528\u653e\u5927\u653b\u51fb\u4e86\u522b\u4eba\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b\u200b &#8230;<\/p>\n<p> \u597d\u7684\u8c22\u8c22\uff0c\u6211\u628a\u4e0d\u5fc5\u8981\u7684\u7aef\u53e3\u90fd\u4e0d\u5f00\u653e\u4e86\t\t\t  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5c71\u91ce\u5339\u592b \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/54695"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=54695"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/54695\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=54695"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=54695"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=54695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}