PHP一句话后门,产生路径data/log/这是什么哦
本帖最后由 左手dê承諾 于 2017-1-18 14:16 编辑PHP一句话后门,产生路径data/log/这是什么哦
201701_errorlog.php不让上传。。。一段时间貌似产生一次。都删除几次了。不知道是什么
字符还有限制就穿个压缩包把,谁能帮看看是不是木马什么文件造成的
http://www.discuz.net/static/image/filetype/rar.gif201701_errorlog.rar(20.05 KB, 下载次数: 3)2017-1-18 14:12 上传点击文件名下载附件
<?PHP exit;?> 1483228996 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=42.156.137.7; RIP:125.88.189.15 Request: /plugin.php?id=lmyrq:rq&formhash=961467a8
<?PHP exit;?> 1483230826 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=42.120.234.128; RIP:125.88.189.17 Request: /plugin.php?id=lmyrq:rq&formhash=425af9f9
<?PHP exit;?> 1483232779 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=7351; IP=111.175.131.82; RIP:119.84.15.43 Request: /plugin.php?id=lmyrq:rq&formhash=0e6c584c
<?PHP exit;?> 1483235095 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=203.208.60.251; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=f4efc678
<?PHP exit;?> 1483235717 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=61.151.218.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=48b47b1b
<?PHP exit;?> 1483236818 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=203.208.60.203; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=4113ea09
<?PHP exit;?> 1483239100 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=61.151.218.118; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=20be3a05
<?PHP exit;?> 1483241034 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.32 Request: /plugin.php?id=lmyrq:rq&formhash=e137b116
<?PHP exit;?> 1483246206 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=7374; IP=114.228.155.20; RIP:202.102.85.15 Request: /plugin.php?id=lmyrq:rq&formhash=02306c79
<?PHP exit;?> 1483252507 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.30 Request: /plugin.php?id=lmyrq:rq&formhash=de71ff7b
<?PHP exit;?> 1483253337 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=222.91.223.78; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=c573ad2a
<?PHP exit;?> 1483254605 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=180.153.214.188; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=2da668da
<?PHP exit;?> 1483255585 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=180.153.81.212; RIP:222.73.144.29 Request: /plugin.php?id=lmyrq:rq&formhash=d1f327d6
<?PHP exit;?> 1483258311 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=101.226.65.102; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=73decf64
<?PHP exit;?> 1483259404 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=203.208.60.250; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=b46e046a
<?PHP exit;?> 1483260376 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 c37495cde8e8f107165be0c6c616a84f <b>User:</b> uid=0; IP=138.197.40.174; RIP:222.73.144.28 Request: /search.php?mod=forum&srchtxt=%d0%d2%d4%cb28%c4%a3%ca%bd&formhash=72d68794&searchsubmit=true&source=hotsearch
<?PHP exit;?> 1483261017 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=180.153.214.180; RIP:222.73.144.34 Request: /plugin.php?id=lmyrq:rq&formhash=10042002
<?PHP exit;?> 1483261788 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=101.226.64.177; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=bb33e79c
<?PHP exit;?> 1483265343 <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024 886d09da1d4ce3cebf1bdf36bcf3e486 <b>User:</b> uid=0; IP=101.226.89.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=0dfebe50复制代码
页:
[1]