date: 2017-01-21 02:20
最近被攻击，导致停机几天，主要wordpress的xmlrpc.php被一直访问。
一早以为是腾讯云坑了。具体排查了一下，发现是php-fpm进程卡住了。
[21-Jan-2017 08:27:39] [pool www] pid 5966
script_filename = /data/wwwroot/default/xmlrpc.php
[0x00007efddb412c20] curl_exec() /data/wwwroot/default/wp-includes/Requests/Transport/cURL.php:162
[0x00007efddb412b50] request() /data/wwwroot/default/wp-includes/class-requests.php:379
[0x00007efddb412a40] request() /data/wwwroot/default/wp-includes/class-http.php:365
[0x00007efddb4128a0] request() /data/wwwroot/default/wp-includes/class-http.php:590
[0x00007efddb4127e0] get() /data/wwwroot/default/wp-includes/http.php:70
[0x00007efddb412730] wp_safe_remote_get() /data/wwwroot/default/wp-includes/class-wp-xmlrpc-server.php:6303
[0x00007efddb412480] pingback_ping() /data/wwwroot/default/wp-includes/IXR/class-IXR-server.php:115
[0x00007efddb4123a0] call() /data/wwwroot/default/wp-includes/IXR/class-IXR-server.php:65
[0x00007efddb4122b0] serve() /data/wwwroot/default/wp-includes/IXR/class-IXR-server.php:27
[0x00007efddb412210] __construct() /data/wwwroot/default/wp-includes/IXR/class-IXR-server.php:35
[0x00007efddb412170] IXR_Server() /data/wwwroot/default/wp-includes/class-wp-xmlrpc-server.php:206
[0x00007efddb412100] serve_request() /data/wwwroot/default/xmlrpc.php:84
自己暴网站文件地址真的好么？哈哈。。。。