<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>深蓝的blog &#187; 后门</title>
	<atom:link href="http://www.lanxinbase.com/?feed=rss2&#038;tag=%E5%90%8E%E9%97%A8" rel="self" type="application/rss+xml" />
	<link>http://www.lanxinbase.com</link>
	<description>记录日常生活</description>
	<lastBuildDate>Sat, 07 Feb 2026 10:59:52 +0000</lastBuildDate>
	<language>zh-CN</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=4.2.3</generator>
	<item>
		<title>一次ssh被植入后门的经历及解决方案</title>
		<link>http://www.lanxinbase.com/?p=692</link>
		<comments>http://www.lanxinbase.com/?p=692#comments</comments>
		<pubDate>Thu, 27 Aug 2015 01:57:36 +0000</pubDate>
		<dc:creator><![CDATA[Alan]]></dc:creator>
				<category><![CDATA[2.运维相关]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[后门]]></category>

		<guid isPermaLink="false">http://blog.lanxinbase.com/?p=692</guid>
		<description><![CDATA[昨天发现服务器上面很多程序被挂马了，跟开发一起处理了挂马文件，今早发现游戏后台又打不开了，上服务器发现后台程序的入口文件都被删了，恢复了index.php、admin.php后才能正常访问，晚上谁也没上过服务器，可以判定服务器已经被入侵了，开始排查：]]></description>
		<wfw:commentRss>http://www.lanxinbase.com/?feed=rss2&#038;p=692</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
