HEX
Server: nginx/1.26.1
System: Linux iZrj9cbdvwu1cot8sjlyzlZ 5.10.134-15.al8.x86_64 #1 SMP Thu Jul 20 00:44:04 CST 2023 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
$ pwd: /www/wwwlogs/request/
Upload Files
File: /www/wwwlogs/request/2026-03-09.json
["2026-03-09 07:13:01", "101.36.109.20:42668", "GET", "/h1//kf.html?", "Mozilla/5.0 (iPhone; CPU iPhone OS 15_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/139.0 Mobile/15E148 Safari/605.1.15", "{}", 0, 308, 265, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:31", "49.73.230.171:38664", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 971, 200, 6398, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:33", "49.73.230.171:38682", "GET", "/code?t=1773050193461", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 0, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:38", "49.73.230.171:38684", "POST", "/login?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'safe_mode': '1', 'username': '******', 'password': '******'}", 810, 200, 399, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:39", "49.73.230.171:38684", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 102, 200, 2666, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:44", "49.73.230.171:38664", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 1514, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:45", "49.73.230.171:38684", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 5, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:45", "49.73.230.171:38664", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 193, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:45", "49.73.230.171:38692", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 144, 200, 287, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:45", "49.73.230.171:38684", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 23, 200, 2887, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:45", "49.73.230.171:38664", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'cid': '38724826926763'}", 25, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:46", "49.73.230.171:38685", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 8, 200, 906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:46", "49.73.230.171:38683", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1033, 200, 830, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:46", "49.73.230.171:38692", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 91, 200, 419, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:47", "49.73.230.171:38692", "POST", "/panel/public/get_exp_ltd?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:47", "49.73.230.171:38664", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 73, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:48", "49.73.230.171:38692", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'check': 'true'}", 862, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:49", "49.73.230.171:38684", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 687, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:49", "49.73.230.171:38684", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 20, 200, 901, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:53", "49.73.230.171:38684", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 877, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:56", "49.73.230.171:38684", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 23, 200, 862, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:59", "49.73.230.171:38685", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 51, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:59", "49.73.230.171:38692", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:59", "49.73.230.171:38664", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:59", "49.73.230.171:38692", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 66, 200, 487, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:56:59", "49.73.230.171:38684", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 45, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:03", "49.73.230.171:38684", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 49, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:04", "49.73.230.171:38692", "POST", "/crontab?action=get_auto_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'mysql'}", 11, 200, 38, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:04", "49.73.230.171:38685", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'mysql'}", 5, 200, 155, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:04", "49.73.230.171:38683", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 10, 200, 299, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:04", "49.73.230.171:38684", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:57:05", "49.73.230.171:38684", "POST", "/database?action=view_database_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'db_type': 'mysql'}", 7, 200, 96, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:07", "49.73.230.171:38683", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 49, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:07", "49.73.230.171:38682", "POST", "/crontab?action=get_crontab_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 12, 200, 27, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:07", "49.73.230.171:38685", "POST", "/crontab?action=get_crontab_service", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 8, 200, 50, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:08", "49.73.230.171:38684", "POST", "/crontab?action=GetCrontab", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'count': '20', 'search': '', 'type_id': '', 'order_param': ''}", 76, 200, 822, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:12", "49.73.230.171:38684", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '10', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 14, 200, 7458, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:12", "49.73.230.171:38682", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 169, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:12", "49.73.230.171:38685", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 909, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:13", "49.73.230.171:38664", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 120, 200, 2430, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:14", "49.73.230.171:38664", "POST", "/plugin?action=a&name=free_waf", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:15", "49.73.230.171:38684", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'free_waf'}", 15, 200, 20085, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:17", "49.73.230.171:38664", "GET", "/free_waf/static/jquery.fixedheadertable.min.js?_=1773050206590", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 10, 200, 3378, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:17", "49.73.230.171:38684", "GET", "/free_waf/static/font_1474105_ofrmqg44wnb.css?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 3104, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:17", "49.73.230.171:38684", "POST", "/plugin?action=a&name=free_waf&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 42, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:18", "49.73.230.171:38664", "POST", "/plugin?action=a&name=free_waf&s=get_total_all", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 857, 200, 346, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:43", "49.73.230.171:38683", "POST", "/plugin?action=a&name=free_waf&s=get_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 531, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:58:48", "49.73.230.171:38683", "POST", "/plugin?action=a&name=free_waf&s=get_site_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 54, 200, 546, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:59:31", "49.73.230.171:38683", "POST", "/plugin?action=a&name=free_waf&s=san_dir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com'}", 39049, 200, 651, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 17:59:58", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/Diff/Engine/native.php'}", 7, 200, 4417, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:01", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/Diff/Engine/shell.php'}", 3, 200, 1584, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:04", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/SimplePie.php'}", 6, 200, 21559, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:08", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/Sanitize.php'}", 4, 200, 6841, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:13", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/essential-addons-for-elementor-lite/includes/Traits/Facebook_Feed.php'}", 3, 200, 3198, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:17", "49.73.230.171:38683", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/Invoker.php'}", 4, 200, 1037, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:22", "49.73.230.171:38685", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '0', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 15, 200, 8747, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:22", "49.73.230.171:38682", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:22", "49.73.230.171:38682", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 2430, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:26", "49.73.230.171:38682", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 11, 200, 6071, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:29", "49.73.230.171:38683", "POST", "/plugin?action=a&name=webshell_check", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:30", "49.73.230.171:38683", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'webshell_check'}", 10, 200, 5730, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:30", "49.73.230.171:38683", "POST", "/plugin?action=a&name=webshell_check&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 33, 200, 123, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:30", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:31", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 674, 200, 2540, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:35", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=start_scan", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com'}", 109, 200, 69, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:36", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:37", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:39", "49.73.230.171:38682", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-09 18:00:40", "49.73.230.171:38883", "GET", "/ws_panel?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 141750, 200, 1, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
@ Telegram