Discuz!官方免费开源建站系统

 找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索

[求助] PHP一句话后门,产生路径data/log/这是什么哦

[复制链接]
左手dê承諾 发表于 2017-1-18 14:11:27 | 显示全部楼层 |阅读模式
本帖最后由 左手dê承諾 于 2017-1-18 14:16 编辑

PHP一句话后门,产生路径data/log/这是什么哦

201701_errorlog.php不让上传。。。一段时间貌似产生一次。都删除几次了。不知道是什么

字符还有限制就穿个压缩包把,谁能帮看看是不是木马什么文件造成的


  1. <?PHP exit;?>        1483228996        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=42.156.137.7; RIP:125.88.189.15 Request: /plugin.php?id=lmyrq:rq&formhash=961467a8
  2. <?PHP exit;?>        1483230826        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=42.120.234.128; RIP:125.88.189.17 Request: /plugin.php?id=lmyrq:rq&formhash=425af9f9
  3. <?PHP exit;?>        1483232779        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=7351; IP=111.175.131.82; RIP:119.84.15.43 Request: /plugin.php?id=lmyrq:rq&formhash=0e6c584c
  4. <?PHP exit;?>        1483235095        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=203.208.60.251; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=f4efc678
  5. <?PHP exit;?>        1483235717        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=61.151.218.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=48b47b1b
  6. <?PHP exit;?>        1483236818        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=203.208.60.203; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=4113ea09
  7. <?PHP exit;?>        1483239100        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=61.151.218.118; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=20be3a05
  8. <?PHP exit;?>        1483241034        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.32 Request: /plugin.php?id=lmyrq:rq&formhash=e137b116
  9. <?PHP exit;?>        1483246206        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=7374; IP=114.228.155.20; RIP:202.102.85.15 Request: /plugin.php?id=lmyrq:rq&formhash=02306c79
  10. <?PHP exit;?>        1483252507        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=101.226.33.219; RIP:222.73.144.30 Request: /plugin.php?id=lmyrq:rq&formhash=de71ff7b
  11. <?PHP exit;?>        1483253337        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=222.91.223.78; RIP:222.73.144.33 Request: /plugin.php?id=lmyrq:rq&formhash=c573ad2a
  12. <?PHP exit;?>        1483254605        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=180.153.214.188; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=2da668da
  13. <?PHP exit;?>        1483255585        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=180.153.81.212; RIP:222.73.144.29 Request: /plugin.php?id=lmyrq:rq&formhash=d1f327d6
  14. <?PHP exit;?>        1483258311        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=101.226.65.102; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=73decf64
  15. <?PHP exit;?>        1483259404        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=203.208.60.250; RIP:222.73.144.27 Request: /plugin.php?id=lmyrq:rq&formhash=b46e046a
  16. <?PHP exit;?>        1483260376        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>search.php:0022 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        c37495cde8e8f107165be0c6c616a84f        <b>User:</b> uid=0; IP=138.197.40.174; RIP:222.73.144.28 Request: /search.php?mod=forum&srchtxt=%d0%d2%d4%cb28%c4%a3%ca%bd&formhash=72d68794&searchsubmit=true&source=hotsearch
  17. <?PHP exit;?>        1483261017        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=180.153.214.180; RIP:222.73.144.34 Request: /plugin.php?id=lmyrq:rq&formhash=10042002
  18. <?PHP exit;?>        1483261788        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=101.226.64.177; RIP:222.73.144.28 Request: /plugin.php?id=lmyrq:rq&formhash=bb33e79c
  19. <?PHP exit;?>        1483265343        <b>您当前的访问请求当中含有非法字符,已经被系统拒绝</b><br><b>PHP:</b>plugin.php:0021 -> source\class\discuz\discuz_application.php:0071 -> source\class\discuz\discuz_application.php:0552 -> source\class\discuz\discuz_application.php:0355 -> source\function\function_core.php:0023 -> source\class\discuz\discuz_error.php:0024        886d09da1d4ce3cebf1bdf36bcf3e486        <b>User:</b> uid=0; IP=101.226.89.119; RIP:222.73.144.31 Request: /plugin.php?id=lmyrq:rq&formhash=0dfebe50
复制代码


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

x
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

手机版|小黑屋|Discuz! 官方站 ( 皖ICP备16010102号 )star

GMT+8, 2024-11-25 23:42 , Processed in 0.020854 second(s), 3 queries , Gzip On, Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2023, Tencent Cloud.

快速回复 返回顶部 返回列表