cye玫瑰 发表于 2017-3-13 11:15:18

PHP一句话后门,产生路径data/log/这是什么哦

本帖最后由 左手dê承諾 于 2017-1-18 14:16 编辑

PHP一句话后门,产生路径data/log/这是什么哦

201701_errorlog.php不让上传。。。一段时间貌似产生一次。都删除几次了。不知道是什么

字符还有限制就穿个压缩包把,谁能帮看看是不是木马什么文件造成的
http://www.discuz.net/static/image/filetype/rar.gif201701_errorlog.rar(20.05 KB, 下载次数: 3)2017-1-18 14:12 上传点击文件名下载附件

<?PHP exit;?>      1483228996      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=42.156.137.7; RIP:125.88.189.15 Request: /plugin.php?id=lmyrq:rq&formhash=961467a8
<?PHP exit;?>      1483230826      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=42.120.234.128; RIP:125.88.189.17 Request: /plugin.php?id=lmyrq:rq&formhash=425af9f9
<?PHP exit;?>      1483232779      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=7351; IP=111.175.131.82; RIP:119.84.15.43 Request: /plugin.php?id=lmyrq:rq&formhash=0e6c584c
<?PHP exit;?>      1483235095      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=203.208.60.251; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=f4efc678
<?PHP exit;?>      1483235717      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=61.151.218.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=48b47b1b
<?PHP exit;?>      1483236818      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=203.208.60.203; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=4113ea09
<?PHP exit;?>      1483239100      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=61.151.218.118; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=20be3a05
<?PHP exit;?>      1483241034      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.32 Request: /plugin.php?id=lmyrq:rq&formhash=e137b116
<?PHP exit;?>      1483246206      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=7374; IP=114.228.155.20; RIP:202.102.85.15 Request: /plugin.php?id=lmyrq:rq&formhash=02306c79
<?PHP exit;?>      1483252507      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.30 Request: /plugin.php?id=lmyrq:rq&formhash=de71ff7b
<?PHP exit;?>      1483253337      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=222.91.223.78; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=c573ad2a
<?PHP exit;?>      1483254605      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=180.153.214.188; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=2da668da
<?PHP exit;?>      1483255585      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=180.153.81.212; RIP:222.73.144.29 Request: /plugin.php?id=lmyrq:rq&formhash=d1f327d6
<?PHP exit;?>      1483258311      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=101.226.65.102; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=73decf64
<?PHP exit;?>      1483259404      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=203.208.60.250; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=b46e046a
<?PHP exit;?>      1483260376      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      c37495cde8e8f107165be0c6c616a84f      <b>User:</b> uid=0; IP=138.197.40.174; RIP:222.73.144.28 Request: /search.php?mod=forum&srchtxt=%d0%d2%d4%cb28%c4%a3%ca%bd&formhash=72d68794&searchsubmit=true&source=hotsearch
<?PHP exit;?>      1483261017      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=180.153.214.180; RIP:222.73.144.34 Request: /plugin.php?id=lmyrq:rq&formhash=10042002
<?PHP exit;?>      1483261788      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=101.226.64.177; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=bb33e79c
<?PHP exit;?>      1483265343      <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024      886d09da1d4ce3cebf1bdf36bcf3e486      <b>User:</b> uid=0; IP=101.226.89.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=0dfebe50复制代码
页: [1]
查看完整版本: PHP一句话后门,产生路径data/log/这是什么哦