["2026-04-21 09:17:55", "49.84.193.73:9521", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 388, 200, 6403, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:17:57", "49.84.193.73:9521", "GET", "/code?t=1776734282462", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 0, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:10", "49.84.193.73:9528", "POST", "/login?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'safe_mode': '1', 'username': '******', 'password': '******'}", 1465, 200, 369, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:11", "49.84.193.73:9528", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 135, 200, 2668, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:20", "49.84.193.73:9530", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 1512, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:21", "49.84.193.73:9529", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 217, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:21", "49.84.193.73:9529", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 6, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:21", "49.84.193.73:9528", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 30, 200, 2900, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:21", "49.84.193.73:9533", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 147, 200, 287, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:22", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1079, 200, 832, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:22", "49.84.193.73:9528", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'cid': '09608827638089'}", 17, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:22", "49.84.193.73:9530", "POST", "/panel/public/get_exp_ltd?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:23", "49.84.193.73:9527", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 26, 200, 906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:23", "49.84.193.73:9530", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 90, 200, 422, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:23", "49.84.193.73:9527", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 63, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:24", "49.84.193.73:9528", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'check': 'true'}", 876, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:25", "49.84.193.73:9527", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 606, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:25", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 25, 200, 896, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:29", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 25, 200, 885, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:32", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 26, 200, 880, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:36", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 143, 200, 878, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:39", "49.84.193.73:9521", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 49, 200, 890, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:43", "49.84.193.73:9521", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 25, 200, 886, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:47", "49.84.193.73:9521", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 37, 200, 867, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:50", "49.84.193.73:9527", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 25, 200, 897, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:52", "49.84.193.73:9521", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:52", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/2026/04'}", 22, 200, 1945, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:52", "49.84.193.73:9530", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 16, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:53", "49.84.193.73:9528", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 7, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:53", "49.84.193.73:9529", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 10, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:53", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': '01-1-100x100.webp,01-1-150x150.webp,01-1-300x128.webp,01-1-300x300.webp,01-1-600x256.webp,01-1-768x328.webp,01-1-1024x437.webp,01-1-1536x656.webp,01-1.webp,01-2-100x100.webp,01-2-150x150.webp,01-2-300x128.webp,01-2-300x300.webp,01-2-600x256.webp,01-2-768x328.webp,01-2-1024x437.webp,01-2-1536x656.webp,01-2.webp,01-100x100.webp,01-150x150.webp,01-300x128.webp,01-300x300.webp,01-600x256.webp,01-768x328.webp,01-1024x437.webp,01-1536x656.webp,01.webp,02-1-100x100.webp,02-1-150x150.webp,02-1-300x128.webp,02-1-300x300.webp,02-1-600x256.webp,02-1-768x328.webp,02-1-1024x437.webp,02-1-1536x656.webp,02-1.webp,02-100x100.webp,02-150x150.webp,02-300x128.webp,02-300x300.webp,02-600x256.webp,02-768x328.webp,02-1024x437.webp,02-1536x656.webp,02.webp,03-1-100x100.webp,03-1-150x150.webp,03-1-300x128.webp,03-1-300x300.webp,03-1-600x256.webp,03-1-768x328.webp,03-1-1024x437.webp,03-1-1536x656.webp,03-1.webp,03-100x100.webp,03-150x150.webp,03-300x128.webp,03-300x300.webp,03-600x256.webp,03-768x328.webp,03-1024x437.webp,03-1536x656.webp,03.webp,04-1-100x100.webp,04-1-150x150.webp,04-1-300x128.webp,04-1-300x300.webp,04-1-600x256.webp,04-1-768x328.webp,04-1-1024x437.webp,04-1-1536x656.webp,04-1.webp,04-100x100.webp,04-150x150.webp,04-300x128.webp,04-300x300.webp,04-600x256.webp,04-768x328.webp,04-1024x437.webp,04-1536x656.webp,04.webp,A-1-100x100.webp,A-1-150x150.webp,A-1-300x138.webp,A-1-300x300.webp,A-1-600x276.webp,A-1-768x353.webp,A-1-1024x470.webp,A-1-1536x706.webp,A-1-2048x941.webp,A-1.webp,A-2-100x100.webp,A-2-150x150.webp,A-2-300x138.webp,A-2-300x300.webp,A-2-600x276.webp,A-2-768x353.webp,A-2-1024x470.webp,A-2-1536x706.webp,A-2-2048x941.webp,A-2.webp,A-100x100.webp,A-150x150.webp,A-300x138.webp,A-300x300.webp,A-600x276.webp,A-768x353.webp,A-1024x470.webp,A-1536x706.webp,A-2048x941.webp,A.webp,B-1-100x100.webp,B-1-150x150.webp,B-1-300x300.webp,B-1-600x600.webp,B-1-768x768.webp,B-1.webp,B-100x100.webp,B-150x150.webp,B-300x300.webp,B-600x600.webp,B-768x768.webp,B.webp,C.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-100x100.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-150x150.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-300x208.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-300x300.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-600x416.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-768x532.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-1024x710.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-1536x1065.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-2048x1420.webp,\u5de5\u5382\u5916\u89c2\u56fe-1.webp,\u5de5\u5382\u5916\u89c2\u56fe-100x100.webp,\u5de5\u5382\u5916\u89c2\u56fe-150x150.webp,\u5de5\u5382\u5916\u89c2\u56fe-300x208.webp,\u5de5\u5382\u5916\u89c2\u56fe-300x300.webp,\u5de5\u5382\u5916\u89c2\u56fe-600x416.webp,\u5de5\u5382\u5916\u89c2\u56fe-768x532.webp,\u5de5\u5382\u5916\u89c2\u56fe-1024x710.webp,\u5de5\u5382\u5916\u89c2\u56fe-1536x1065.webp,\u5de5\u5382\u5916\u89c2\u56fe-2048x1420.webp,\u5de5\u5382\u5916\u89c2\u56fe.webp', 'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/2026/04'}", 154, 200, 47269, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:18:53", "49.84.193.73:9528", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:23", "49.84.193.73:9527", "POST", "/files?action=SetBatchData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'data': '[\"backup_1776690520.zip\",\"backup_1776690826.zip\",\"contact-1776691119.zip\"]', 'type': '4', 'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/2026/04'}", 33, 200, 124, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:23", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/2026/04'}", 22, 200, 1871, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:24", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': '01-1-100x100.webp,01-1-150x150.webp,01-1-300x128.webp,01-1-300x300.webp,01-1-600x256.webp,01-1-768x328.webp,01-1-1024x437.webp,01-1-1536x656.webp,01-1.webp,01-2-100x100.webp,01-2-150x150.webp,01-2-300x128.webp,01-2-300x300.webp,01-2-600x256.webp,01-2-768x328.webp,01-2-1024x437.webp,01-2-1536x656.webp,01-2.webp,01-100x100.webp,01-150x150.webp,01-300x128.webp,01-300x300.webp,01-600x256.webp,01-768x328.webp,01-1024x437.webp,01-1536x656.webp,01.webp,02-1-100x100.webp,02-1-150x150.webp,02-1-300x128.webp,02-1-300x300.webp,02-1-600x256.webp,02-1-768x328.webp,02-1-1024x437.webp,02-1-1536x656.webp,02-1.webp,02-100x100.webp,02-150x150.webp,02-300x128.webp,02-300x300.webp,02-600x256.webp,02-768x328.webp,02-1024x437.webp,02-1536x656.webp,02.webp,03-1-100x100.webp,03-1-150x150.webp,03-1-300x128.webp,03-1-300x300.webp,03-1-600x256.webp,03-1-768x328.webp,03-1-1024x437.webp,03-1-1536x656.webp,03-1.webp,03-100x100.webp,03-150x150.webp,03-300x128.webp,03-300x300.webp,03-600x256.webp,03-768x328.webp,03-1024x437.webp,03-1536x656.webp,03.webp,04-1-100x100.webp,04-1-150x150.webp,04-1-300x128.webp,04-1-300x300.webp,04-1-600x256.webp,04-1-768x328.webp,04-1-1024x437.webp,04-1-1536x656.webp,04-1.webp,04-100x100.webp,04-150x150.webp,04-300x128.webp,04-300x300.webp,04-600x256.webp,04-768x328.webp,04-1024x437.webp,04-1536x656.webp,04.webp,A-1-100x100.webp,A-1-150x150.webp,A-1-300x138.webp,A-1-300x300.webp,A-1-600x276.webp,A-1-768x353.webp,A-1-1024x470.webp,A-1-1536x706.webp,A-1-2048x941.webp,A-1.webp,A-2-100x100.webp,A-2-150x150.webp,A-2-300x138.webp,A-2-300x300.webp,A-2-600x276.webp,A-2-768x353.webp,A-2-1024x470.webp,A-2-1536x706.webp,A-2-2048x941.webp,A-2.webp,A-100x100.webp,A-150x150.webp,A-300x138.webp,A-300x300.webp,A-600x276.webp,A-768x353.webp,A-1024x470.webp,A-1536x706.webp,A-2048x941.webp,A.webp,B-1-100x100.webp,B-1-150x150.webp,B-1-300x300.webp,B-1-600x600.webp,B-1-768x768.webp,B-1.webp,B-100x100.webp,B-150x150.webp,B-300x300.webp,B-600x600.webp,B-768x768.webp,B.webp,C.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-100x100.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-150x150.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-300x208.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-300x300.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-600x416.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-768x532.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-1024x710.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-1536x1065.webp,\u5de5\u5382\u5916\u89c2\u56fe-1-2048x1420.webp,\u5de5\u5382\u5916\u89c2\u56fe-1.webp,\u5de5\u5382\u5916\u89c2\u56fe-100x100.webp,\u5de5\u5382\u5916\u89c2\u56fe-150x150.webp,\u5de5\u5382\u5916\u89c2\u56fe-300x208.webp,\u5de5\u5382\u5916\u89c2\u56fe-300x300.webp,\u5de5\u5382\u5916\u89c2\u56fe-600x416.webp,\u5de5\u5382\u5916\u89c2\u56fe-768x532.webp,\u5de5\u5382\u5916\u89c2\u56fe-1024x710.webp,\u5de5\u5382\u5916\u89c2\u56fe-1536x1065.webp,\u5de5\u5382\u5916\u89c2\u56fe-2048x1420.webp,\u5de5\u5382\u5916\u89c2\u56fe.webp', 'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/2026/04'}", 21, 200, 47269, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:25", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1044, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:32", "49.84.193.73:9527", "POST", "/files?action=Get_Recycle_bin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': 'all', 'p': '1', 'limit': '10', 'search': '', 'time_search': ''}", 198, 200, 629, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:34", "49.84.193.73:9527", "POST", "/files?action=Get_Recycle_bin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': 'file', 'p': '1', 'limit': '10', 'search': '', 'time_search': ''}", 8, 200, 639, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:39", "49.84.193.73:9527", "POST", "/files?action=Get_Recycle_bin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': 'file', 'p': '2', 'limit': '10', 'search': '', 'time_search': ''}", 8, 200, 641, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:43", "49.84.193.73:9527", "POST", "/files?action=Get_Recycle_bin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': 'file', 'p': '3', 'limit': '10', 'search': '', 'time_search': ''}", 8, 200, 640, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:55", "49.84.193.73:9527", "POST", "/files?action=MvFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-content', 'dfile': '/www/wwwroot/dewenlabels.com/wp-content2', 'rename': 'true'}", 9, 200, 58, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:56", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1042, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:19:59", "49.84.193.73:9527", "POST", "/files?action=MvFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-conten1', 'dfile': '/www/wwwroot/dewenlabels.com/wp-conten', 'rename': 'true'}", 10, 200, 58, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:00", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:19", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 7, 200, 647, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:19", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 93, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:29", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content2/themes'}", 7, 200, 722, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:45", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 7, 200, 647, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:45", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 3, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:46", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:47", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-conten'}", 7, 200, 612, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:48", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-conten'}", 4, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:49", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-conten/themes'}", 7, 200, 590, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:51", "49.84.193.73:9527", "POST", "/files?action=CheckExistsFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'dfile': '/www/wwwroot/dewenlabels.com/wp-conten/themes', 'filename': 'astra'}", 3, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:53", "49.84.193.73:9527", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:20:57", "49.84.193.73:9527", "POST", "/files?action=CheckExistsFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'dfile': '/www/wwwroot/dewenlabels.com/wp-conten/themes', 'filename': 'astra'}", 3, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:00", "49.84.193.73:9527", "POST", "/files?action=CopyFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-content2/themes/astra', 'dfile': '/www/wwwroot/dewenlabels.com/wp-conten/themes/astra'}", 297, 200, 64, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:00", "49.84.193.73:9529", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 6, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:01", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-conten/themes'}", 7, 200, 602, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:22", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-conten'}", 7, 200, 612, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:22", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-conten'}", 4, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:24", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:26", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 7, 200, 647, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:27", "49.84.193.73:9527", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content2'}", 4, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:47", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1041, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:21:49", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 19, 200, 4202, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:08", "49.84.193.73:9527", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'class-wp-theme.php'}", 7, 200, 511, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:11", "49.84.193.73:9529", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 8, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:11", "49.84.193.73:9527", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': ''}", 18, 200, 4213, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:12", "49.84.193.73:9527", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php'}", 9, 200, 14109, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:12", "49.84.193.73:9528", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php'}", 4, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:40", "49.84.193.73:9521", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php', 'data': \"<?php\\n/**\\n * WP_Theme Class\\n *\\n * @package WordPress\\n * @subpackage Theme\\n * @since 3.4.0\\n */\\n#[AllowDynamicProperties]\\nfinal class WP_Theme implements ArrayAccess {\\n\\n\\t/**\\n\\t * Whether the theme has been marked as updateable.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var bool\\n\\t *\\n\\t * @see WP_MS_Themes_List_Table\\n\\t */\\n\\tpublic $update = false;\\n\\n\\t/**\\n\\t * Headers for style.css files.\\n\\t *\\n\\t * @since 3.4.0\\n\\t * @since 5.4.0 Added `Requires at least` and `Requires PHP` headers.\\n\\t * @since 6.1.0 Added `Update URI` header.\\n\\t * @var string[]\\n\\t */\\n\\tprivate static $file_headers = array(\\n\\t\\t'Name'        => 'Theme Name',\\n\\t\\t'ThemeURI'    => 'Theme URI',\\n\\t\\t'Description' => 'Description',\\n\\t\\t'Author'      => 'Author',\\n\\t\\t'AuthorURI'   => 'Author URI',\\n\\t\\t'Version'     => 'Version',\\n\\t\\t'Template'    => 'Template',\\n\\t\\t'Status'      => 'Status',\\n\\t\\t'Tags'        => 'Tags',\\n\\t\\t'TextDomain'  => 'Text Domain',\\n\\t\\t'DomainPath'  => 'Domain Path',\\n\\t\\t'RequiresWP'  => 'Requires at least',\\n\\t\\t'RequiresPHP' => 'Requires PHP',\\n\\t\\t'UpdateURI'   => 'Update URI',\\n\\t);\\n\\n\\t -- >4096\", 'encoding': 'utf-8', 'st_mtime': '1775889659', 'force': '0'}", 331, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:41", "49.84.193.73:9521", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php'}", 6, 200, 14128, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:52", "49.84.193.73:9521", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php', 'data': \"<?php\\n/**\\n * WP_Theme Class\\n *\\n * @package WordPress\\n * @subpackage Theme\\n * @since 3.4.0\\n */\\n#[AllowDynamicProperties]\\nfinal class WP_Theme implements ArrayAccess {\\n\\n\\t/**\\n\\t * Whether the theme has been marked as updateable.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var bool\\n\\t *\\n\\t * @see WP_MS_Themes_List_Table\\n\\t */\\n\\tpublic $update = false;\\n\\n\\t/**\\n\\t * Headers for style.css files.\\n\\t *\\n\\t * @since 3.4.0\\n\\t * @since 5.4.0 Added `Requires at least` and `Requires PHP` headers.\\n\\t * @since 6.1.0 Added `Update URI` header.\\n\\t * @var string[]\\n\\t */\\n\\tprivate static $file_headers = array(\\n\\t\\t'Name'        => 'Theme Name',\\n\\t\\t'ThemeURI'    => 'Theme URI',\\n\\t\\t'Description' => 'Description',\\n\\t\\t'Author'      => 'Author',\\n\\t\\t'AuthorURI'   => 'Author URI',\\n\\t\\t'Version'     => 'Version',\\n\\t\\t'Template'    => 'Template',\\n\\t\\t'Status'      => 'Status',\\n\\t\\t'Tags'        => 'Tags',\\n\\t\\t'TextDomain'  => 'Text Domain',\\n\\t\\t'DomainPath'  => 'Domain Path',\\n\\t\\t'RequiresWP'  => 'Requires at least',\\n\\t\\t'RequiresPHP' => 'Requires PHP',\\n\\t\\t'UpdateURI'   => 'Update URI',\\n\\t);\\n\\n\\t -- >4096\", 'encoding': 'utf-8', 'st_mtime': '1776734560', 'force': '0'}", 26, 200, 126, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:22:52", "49.84.193.73:9521", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php'}", 6, 200, 14131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:02", "49.84.193.73:9521", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php', 'data': \"<?php\\n/**\\n * WP_Theme Class\\n *\\n * @package WordPress\\n * @subpackage Theme\\n * @since 3.4.0\\n */\\n#[AllowDynamicProperties]\\nfinal class WP_Theme implements ArrayAccess {\\n\\n\\t/**\\n\\t * Whether the theme has been marked as updateable.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var bool\\n\\t *\\n\\t * @see WP_MS_Themes_List_Table\\n\\t */\\n\\tpublic $update = false;\\n\\n\\t/**\\n\\t * Headers for style.css files.\\n\\t *\\n\\t * @since 3.4.0\\n\\t * @since 5.4.0 Added `Requires at least` and `Requires PHP` headers.\\n\\t * @since 6.1.0 Added `Update URI` header.\\n\\t * @var string[]\\n\\t */\\n\\tprivate static $file_headers = array(\\n\\t\\t'Name'        => 'Theme Name',\\n\\t\\t'ThemeURI'    => 'Theme URI',\\n\\t\\t'Description' => 'Description',\\n\\t\\t'Author'      => 'Author',\\n\\t\\t'AuthorURI'   => 'Author URI',\\n\\t\\t'Version'     => 'Version',\\n\\t\\t'Template'    => 'Template',\\n\\t\\t'Status'      => 'Status',\\n\\t\\t'Tags'        => 'Tags',\\n\\t\\t'TextDomain'  => 'Text Domain',\\n\\t\\t'DomainPath'  => 'Domain Path',\\n\\t\\t'RequiresWP'  => 'Requires at least',\\n\\t\\t'RequiresPHP' => 'Requires PHP',\\n\\t\\t'UpdateURI'   => 'Update URI',\\n\\t);\\n\\n\\t -- >4096\", 'encoding': 'utf-8', 'st_mtime': '1776734572', 'force': '0'}", 74, 200, 140, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:02", "49.84.193.73:9521", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-theme.php'}", 6, 200, 14116, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:06", "49.84.193.73:9530", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 63, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:06", "49.84.193.73:9533", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 5, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:06", "49.84.193.73:9521", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 14, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:07", "49.84.193.73:9530", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 68, 200, 493, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:07", "49.84.193.73:9528", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 103, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:09", "49.84.193.73:9527", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:09", "49.84.193.73:9529", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 10, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:09", "49.84.193.73:9528", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 18, 200, 4221, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:09", "49.84.193.73:9530", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 9, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:09", "49.84.193.73:9533", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 54, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:10", "49.84.193.73:9533", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:11", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 8, 200, 537, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:12", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1049, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:14", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 19, 200, 4221, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:19", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 7, 200, 537, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:21", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939'}", 13, 200, 1099, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:23", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/wp-includes'}", 45, 200, 5387, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:31", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/wp-includes', 'search': 'patterns', 'all': 'True'}", 199, 200, 683, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:42", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 7, 200, 539, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:43", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1049, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:47", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'patterns'}", 7, 200, 427, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:51", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com', 'search': 'patterns', 'all': 'True'}", 818, 200, 1599, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:51", "49.84.193.73:9533", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'wp-content2/themes/morenews/admin-dashboard/assets/images/block-patterns.jpg', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1018, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:55", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1047, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:56", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 18, 200, 4220, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:23:58", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'patterns'}", 7, 200, 553, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:00", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes', 'search': 'patterns', 'all': 'True'}", 25, 200, 631, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:30", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1047, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:36", "49.84.193.73:9533", "POST", "/files?action=MvFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-includes', 'dfile': '/www/wwwroot/dewenlabels.com/wp-includes2', 'rename': 'true'}", 13, 200, 58, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:37", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1047, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:38", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 7, 200, 537, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:39", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939'}", 8, 200, 1095, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:43", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 7, 200, 537, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:44", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1047, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:45", "49.84.193.73:9533", "POST", "/files?action=CheckExistsFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'dfile': '/www/wwwroot/dewenlabels.com', 'filename': 'wp-includes'}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:48", "49.84.193.73:9533", "POST", "/files?action=CopyFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939/wp-includes', 'dfile': '/www/wwwroot/dewenlabels.com/wp-includes'}", 2375, 200, 64, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:48", "49.84.193.73:9530", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:24:48", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 9, 200, 1062, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:25:04", "49.84.193.73:9533", "POST", "/files?action=MvFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-conten', 'dfile': '/www/wwwroot/dewenlabels.com/wp-conten1', 'rename': 'true'}", 11, 200, 58, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:25:05", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1062, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:25:09", "49.84.193.73:9533", "POST", "/files?action=MvFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sfile': '/www/wwwroot/dewenlabels.com/wp-content2', 'dfile': '/www/wwwroot/dewenlabels.com/wp-content', 'rename': 'true'}", 10, 200, 58, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:25:09", "49.84.193.73:9533", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1061, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:28:21", "49.84.193.73:9533", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 09:29:53", "49.84.193.73:9533", "GET", "/files?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 50, 200, 2674, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:01", "49.84.193.73:9533", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 1512, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:02", "49.84.193.73:9324", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 62, 200, 1699, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:02", "49.84.193.73:9329", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 4, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:02", "49.84.193.73:9329", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 10, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:03", "49.84.193.73:9533", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 17, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:03", "49.84.193.73:9329", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 9, 200, 1061, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:03", "49.84.193.73:9329", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 9, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:03", "49.84.193.73:9330", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:05", "49.84.193.73:9405", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot'}", 8, 200, 537, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:08", "49.84.193.73:9533", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1698, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:08", "49.84.193.73:9324", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'mysql'}", 7, 200, 155, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:08", "49.84.193.73:9533", "POST", "/crontab?action=get_auto_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'mysql'}", 11, 200, 38, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:08", "49.84.193.73:9329", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 15, 200, 299, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:08", "49.84.193.73:9405", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 09:30:09", "49.84.193.73:9329", "POST", "/database?action=view_database_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'db_type': 'mysql'}", 9, 200, 96, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:14", "49.84.193.73:11252", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 302, 189, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:14", "49.84.193.73:11252", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 56, 200, 2674, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:29", "49.84.193.73:11261", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 1512, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:30", "49.84.193.73:11260", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 95, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:31", "49.84.193.73:11260", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 3, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:31", "49.84.193.73:11255", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 79, 200, 287, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:31", "49.84.193.73:11261", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 17, 200, 2900, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:32", "49.84.193.73:11255", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 9, 200, 906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:32", "49.84.193.73:11261", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 420, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:34", "49.84.193.73:11255", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1036, 200, 844, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:35", "49.84.193.73:11261", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 14, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:35", "49.84.193.73:11321", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'check': 'true'}", 946, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:36", "49.84.193.73:11255", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 871, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:37", "49.84.193.73:11260", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 60, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:37", "49.84.193.73:11316", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:37", "49.84.193.73:11255", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 5, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:37", "49.84.193.73:11260", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 13, 200, 488, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:38", "49.84.193.73:11255", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 36, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:43", "49.84.193.73:11260", "POST", "/data?action=get_https_port", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com'}", 4, 200, 3, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:43", "49.84.193.73:11321", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 62, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11260", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 16, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11321", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 7, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11260", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 1070, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11321", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 10, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11261", "POST", "/data?action=getData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'domain', 'list': 'True', 'search': '1'}", 6, 200, 256, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:44", "49.84.193.73:11316", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:47", "49.84.193.73:11261", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:47", "49.84.193.73:11255", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:47", "49.84.193.73:11260", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:47", "49.84.193.73:11316", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 12, 200, 488, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:47", "49.84.193.73:11261", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 37, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:49", "49.84.193.73:11261", "POST", "/data?action=get_https_port", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com'}", 3, 200, 3, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:49", "49.84.193.73:11261", "POST", "/data?action=getData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'domain', 'list': 'True', 'search': '1'}", 6, 200, 256, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:55", "49.84.193.73:11316", "POST", "/data?action=getKey", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'sites', 'key': 'path', 'id': '1'}", 5, 200, 30, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:55", "49.84.193.73:11316", "POST", "/site?action=GetDirUserINI", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com', 'id': '1'}", 15, 200, 185, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:55", "49.84.193.73:11316", "POST", "/site?action=get_sites_ftp", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'site_id': '1'}", 7, 200, 98, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:05:56", "49.84.193.73:11316", "POST", "/files?action=get_bt_sync_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com'}", 3, 200, 32, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:06:00", "49.84.193.73:11316", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com', 'disk': 'true', 'search': ''}", 24, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:06:02", "49.84.193.73:11316", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot', 'disk': 'true', 'search': ''}", 21, 200, 654, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:06:04", "49.84.193.73:11316", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'disk': 'true', 'search': ''}", 24, 200, 1071, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:06:06", "49.84.193.73:11252", "POST", "/site?action=SetPath", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'id': '1'}", 119, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:06:07", "49.84.193.73:11252", "POST", "/site?action=GetDirUserINI", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'id': '1'}", 14, 200, 166, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:07:06", "49.84.193.73:11252", "POST", "/data?action=get_https_port", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com'}", 3, 200, 3, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:07:06", "49.84.193.73:11252", "POST", "/data?action=getData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'domain', 'list': 'True', 'search': '1'}", 6, 200, 256, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:07:11", "49.84.193.73:11252", "POST", "/data?action=getKey", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'sites', 'key': 'path', 'id': '1'}", 5, 200, 45, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:07:36", "49.84.193.73:11252", "POST", "/site?action=GetDirUserINI", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'id': '1'}", 14, 200, 166, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:00", "49.84.193.73:11316", "POST", "/data?action=get_https_port", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'siteName': 'dewenlabels.com'}", 3, 200, 3, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:00", "49.84.193.73:11316", "POST", "/data?action=getData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'domain', 'list': 'True', 'search': '1'}", 51, 200, 256, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:01", "49.84.193.73:11252", "POST", "/site?action=get_sites_ftp", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'site_id': '1'}", 7, 200, 98, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:01", "49.84.193.73:11252", "POST", "/files?action=get_bt_sync_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939'}", 3, 200, 32, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:02", "49.84.193.73:11252", "POST", "/data?action=getKey", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'table': 'sites', 'key': 'path', 'id': '1'}", 5, 200, 45, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:02", "49.84.193.73:11252", "POST", "/site?action=GetDirUserINI", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'id': '1'}", 14, 200, 166, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:03", "49.84.193.73:11252", "POST", "/site?action=get_sites_ftp", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'site_id': '1'}", 7, 200, 98, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:03", "49.84.193.73:11252", "POST", "/files?action=get_bt_sync_status", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939'}", 3, 200, 32, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:05", "49.84.193.73:11252", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/\u65b0\u5efa\u6587\u4ef6\u5939', 'disk': 'true', 'search': ''}", 23, 200, 1072, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:07", "49.84.193.73:11252", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot', 'disk': 'true', 'search': ''}", 31, 200, 654, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:08", "49.84.193.73:11252", "POST", "/files?action=GetDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com', 'disk': 'true', 'search': ''}", 24, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:10", "49.84.193.73:11252", "POST", "/site?action=SetPath", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com', 'id': '1'}", 115, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:10", "49.84.193.73:11252", "POST", "/site?action=GetDirUserINI", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com', 'id': '1'}", 15, 200, 185, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:17", "49.84.193.73:11261", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 63, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:17", "49.84.193.73:11316", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'mysql'}", 8, 200, 155, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:17", "49.84.193.73:11260", "POST", "/crontab?action=get_auto_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'mysql'}", 10, 200, 38, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:17", "49.84.193.73:11321", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:17", "49.84.193.73:11255", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 9, 200, 299, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:18", "49.84.193.73:11252", "POST", "/database?action=view_database_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'db_type': 'mysql'}", 9, 200, 96, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:20", "49.84.193.73:11321", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:20", "49.84.193.73:11252", "POST", "/database?action=CheckDatabaseStatus", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sid': '0'}", 30, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:31", "49.84.193.73:11321", "POST", "/database?action=CheckDatabaseStatus", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sid': '0'}", 17, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:31", "49.84.193.73:11321", "POST", "/database?action=AddDatabase", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'kdwp', 'db_user': '******', 'password': '******', 'dataAccess': '127.0.0.1', 'address': '127.0.0.1', 'codeing': 'utf8mb4', 'dtype': 'MySQL', 'ps': 'kdwp', 'sid': '0', 'listen_ip': '0.0.0.0/0', 'host': ''}", 12, 200, 160, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:32", "49.84.193.73:11321", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 17, 200, 299, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:33", "49.84.193.73:11252", "POST", "/database?action=GetCloudServer", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 144, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:33", "49.84.193.73:11321", "POST", "/database?action=CheckDatabaseStatus", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sid': '0'}", 8, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:40", "49.84.193.73:11321", "POST", "/database?action=CheckDatabaseStatus", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sid': '0'}", 14, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:41", "49.84.193.73:11321", "POST", "/database?action=AddDatabase", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'kdwps', 'db_user': '******', 'password': '******', 'dataAccess': '127.0.0.1', 'address': '127.0.0.1', 'codeing': 'utf8mb4', 'dtype': 'MySQL', 'ps': 'kdwps', 'sid': '0', 'listen_ip': '0.0.0.0/0', 'host': ''}", 67, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:41", "49.84.193.73:11321", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'table': 'databases', 'search': ''}", 17, 200, 332, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:44", "49.84.193.73:11321", "POST", "/database?action=GetBackup", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'limit': '10', 'search': ''}", 9, 200, 446, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:44", "49.84.193.73:11252", "POST", "/database?action=GetImportLog", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:46", "49.84.193.73:11252", "POST", "/database?action=GetBackup", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '2', 'limit': '10', 'search': ''}", 4, 200, 391, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:08:56", "49.84.193.73:11252", "POST", "/database?action=GetImportSize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'kdwps'}", 3, 200, 4, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:24", "49.84.193.73:11321", "POST", "/database?action=InputSql", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'file': '/www/backup/database/kdwp.sql', 'name': 'kdwps'}", 27824, 200, 70, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:33", "49.84.193.73:12195", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 9, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:33", "49.84.193.73:12194", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 22, 200, 488, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:34", "49.84.193.73:12194", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 99, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:35", "49.84.193.73:12195", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:36", "49.84.193.73:12194", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 60, 200, 1906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:37", "49.84.193.73:12198", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 9, 200, 1069, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:40", "49.84.193.73:12198", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 6, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:41", "49.84.193.73:12194", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 19, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:41", "49.84.193.73:12212", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 11, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:46", "49.84.193.73:12194", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:46", "49.84.193.73:12212", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com', 'search': ''}", 8, 200, 1069, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:46", "49.84.193.73:12198", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 4, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:48", "49.84.193.73:12194", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-config.php'}", 6, 200, 1810, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:48", "49.84.193.73:12198", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-config.php'}", 6, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:55", "49.84.193.73:12194", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-config.php', 'data': '<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * The base configuration for WordPress\\n *\\n * The wp-config.php creation script uses this file during the installation.\\n * You don\\'t have to use the website, you can copy this file to \"wp-config.php\"\\n * and fill in the values.\\n *\\n * This file contains the following configurations:\\n *\\n * * Database settings\\n * * Secret keys\\n * * Database table prefix\\n * * ABSPATH\\n *\\n * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/\\n *\\n * @package WordPress\\n */\\n\\n// ** Database settings - You can get this info from your web host ** //\\n/** The name of the database for WordPress */\\ndefine( \\'DB_NAME\\', \\'kdwps\\' );\\n\\n/** Database username */\\ndefine( \\'DB_USER\\', \\'kdwps\\' );\\n\\n/** Database password */\\ndefine( \\'DB_PASSWORD\\', \\'kdwps\\' );\\n\\n/** Database hostname */\\ndefine( \\'DB_HOST\\', \\'localhost\\' );\\n\\n/** Database charset to use in creating database tables. */\\ndefine( \\'DB_CHARSET\\', \\'utf8mb4\\' );\\n\\n/** The database collate type. Don\\'t change this if in doubt. */\\ndefine( \\'DB_COLLATE\\', \\'\\' );\\n\\n/**#@+\\n * Authentication unique keys and salts.\\n *\\n * Change these to different unique phrases! You can generate these using\\n * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.\\n *\\n * You can change these at any point in time to invalidate all existing cookies.\\n * This will force all users to have to log in again.\\n *\\n * @since 2.6.0\\n */\\ndefine( \\'AUTH_KEY\\',         \\'#vKr9<%7_xyfArWBeiUj%!gz#Fo4VqkU0@Xc8,.4Zd:{soex2iW3ti7t+z[iUBNA\\' );\\ndefine( \\'SECURE_AUTH_KEY\\',  \\'bx>O(vc$ogbd-f?-CK72Xq=~7[ji%Hv~H-!eGOU-iJ/!8rExT.LR:ZJ<>KVReNr{\\' );\\ndefine( \\'LOGGED_IN_KEY\\',    \\'UOxDE%eWieM^HU,WCr-vbwT8Btgz$ax+:9[,UW3O3;JF`ybblD!Hp>,sY I LLsZ\\' );\\ndefine( \\'NONCE_KEY\\',        \\'y%$mn-N%S#h>$s8(fRQ2J2wE0wXjHKWoo){O+(m3g)oi=g/4m?2:[+zSEbA4)l99\\' );\\ndefine( \\'AUTH_SALT\\',        \\'}ia#xc]e_<{!:XsOWZ34c(6/Nwv*NbspkZ|{[k781,RH9Y!A-S82MAgoQvunssix\\' );\\ndefine( \\'SECURE_AUTH_SALT\\', \\'ORU2EktDvo}@kXlklw<D8@[bie?QeT?2}~yzn$t*O[7N]|Y4mQ0hv)~kQ0O>d)Mu\\' );\\ndefine( \\'LOGGED_IN_SALT\\',   \\'DEYG.$ tddNhuaQYf[|;{Ln9yPSiEZh;?pB)i&T.F_c_oq^8Rz*?U[L|>K;|;=d}\\' );\\ndefine( \\'NONCE_SALT\\',       \\'-mWwucD(<+%yy.;g:eE1P8:M(9doqrAF>:n{f![)pm_Do#Q|AgMuxcct#WSzPC>F\\' );\\n\\n/**#@-*/\\n\\n/**\\n * WordPress database table prefix.\\n *\\n * You can have multiple installations in one database if you give each\\n * a unique prefix. Only numbers, letters, and underscores please!\\n *\\n * At the installation time, database tables are created with the specified prefix.\\n * Changing this value after WordPress is installed will make your site think\\n * it has not been installed.\\n *\\n * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix\\n */\\n$table_prefix = \\'wp_\\';\\n\\n/**\\n * For developers: WordPress debugging mode.\\n *\\n * Change this to true to enable the display of notices during development.\\n * It is strongly recommended that plugin and theme developers use WP_DEBUG\\n * in their development environments.\\n *\\n * For information on other constants that can be used for debugging,\\n * visit the documentation.\\n *\\n * @link https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/\\n */\\ndefine( \\'WP_DEBUG\\', false );\\n\\n/* Add any custom values between this line and the \"stop editing\" line. */\\n\\n\\n\\n/* That\\'s all, stop editing! Happy publishing. */\\n\\n/** Absolute path to the WordPress directory. */\\nif ( ! defined( \\'ABSPATH\\' ) ) {\\n\\tdefine( \\'ABSPATH\\', __DIR__ . \\'/\\' );\\n}\\n\\n/** Sets up WordPress vars and included files. */\\nrequire_once ABSPATH . \\'wp-settings.php\\';\\n', 'encoding': 'utf-8', 'st_mtime': '1776307910', 'force': '0'}", 334, 200, 196, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:09:55", "49.84.193.73:12194", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-config.php'}", 4, 200, 1798, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:15:31", "217.28.137.185:15163", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 17:15:53", "217.28.137.185:15163", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-config.php', 'data': '<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * The base configuration for WordPress\\n *\\n * The wp-config.php creation script uses this file during the installation.\\n * You don\\'t have to use the website, you can copy this file to \"wp-config.php\"\\n * and fill in the values.\\n *\\n * This file contains the following configurations:\\n *\\n * * Database settings\\n * * Secret keys\\n * * Database table prefix\\n * * ABSPATH\\n *\\n * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/\\n *\\n * @package WordPress\\n */\\n\\n// ** Database settings - You can get this info from your web host ** //\\n/** The name of the database for WordPress */\\ndefine( \\'DB_NAME\\', \\'kdwp\\' );\\n\\n/** Database username */\\ndefine( \\'DB_USER\\', \\'kdwp\\' );\\n\\n/** Database password */\\ndefine( \\'DB_PASSWORD\\', \\'Kp2rt4MwJ8MbCZE3\\' );\\n\\n/** Database hostname */\\ndefine( \\'DB_HOST\\', \\'localhost\\' );\\n\\n/** Database charset to use in creating database tables. */\\ndefine( \\'DB_CHARSET\\', \\'utf8mb4\\' );\\n\\n/** The database collate type. Don\\'t change this if in doubt. */\\ndefine( \\'DB_COLLATE\\', \\'\\' );\\n\\n/**#@+\\n * Authentication unique keys and salts.\\n *\\n * Change these to different unique phrases! You can generate these using\\n * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.\\n *\\n * You can change these at any point in time to invalidate all existing cookies.\\n * This will force all users to have to log in again.\\n *\\n * @since 2.6.0\\n */\\ndefine( \\'AUTH_KEY\\',         \\'#vKr9<%7_xyfArWBeiUj%!gz#Fo4VqkU0@Xc8,.4Zd:{soex2iW3ti7t+z[iUBNA\\' );\\ndefine( \\'SECURE_AUTH_KEY\\',  \\'bx>O(vc$ogbd-f?-CK72Xq=~7[ji%Hv~H-!eGOU-iJ/!8rExT.LR:ZJ<>KVReNr{\\' );\\ndefine( \\'LOGGED_IN_KEY\\',    \\'UOxDE%eWieM^HU,WCr-vbwT8Btgz$ax+:9[,UW3O3;JF`ybblD!Hp>,sY I LLsZ\\' );\\ndefine( \\'NONCE_KEY\\',        \\'y%$mn-N%S#h>$s8(fRQ2J2wE0wXjHKWoo){O+(m3g)oi=g/4m?2:[+zSEbA4)l99\\' );\\ndefine( \\'AUTH_SALT\\',        \\'}ia#xc]e_<{!:XsOWZ34c(6/Nwv*NbspkZ|{[k781,RH9Y!A-S82MAgoQvunssix\\' );\\ndefine( \\'SECURE_AUTH_SALT\\', \\'ORU2EktDvo}@kXlklw<D8@[bie?QeT?2}~yzn$t*O[7N]|Y4mQ0hv)~kQ0O>d)Mu\\' );\\ndefine( \\'LOGGED_IN_SALT\\',   \\'DEYG.$ tddNhuaQYf[|;{Ln9yPSiEZh;?pB)i&T.F_c_oq^8Rz*?U[L|>K;|;=d}\\' );\\ndefine( \\'NONCE_SALT\\',       \\'-mWwucD(<+%yy.;g:eE1P8:M(9doqrAF>:n{f![)pm_Do#Q|AgMuxcct#WSzPC>F\\' );\\n\\n/**#@-*/\\n\\n/**\\n * WordPress database table prefix.\\n *\\n * You can have multiple installations in one database if you give each\\n * a unique prefix. Only numbers, letters, and underscores please!\\n *\\n * At the installation time, database tables are created with the specified prefix.\\n * Changing this value after WordPress is installed will make your site think\\n * it has not been installed.\\n *\\n * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix\\n */\\n$table_prefix = \\'wp_\\';\\n\\n/**\\n * For developers: WordPress debugging mode.\\n *\\n * Change this to true to enable the display of notices during development.\\n * It is strongly recommended that plugin and theme developers use WP_DEBUG\\n * in their development environments.\\n *\\n * For information on other constants that can be used for debugging,\\n * visit the documentation.\\n *\\n * @link https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/\\n */\\ndefine( \\'WP_DEBUG\\', false );\\n\\n/* Add any custom values between this line and the \"stop editing\" line. */\\n\\n\\n\\n/* That\\'s all, stop editing! Happy publishing. */\\n\\n/** Absolute path to the WordPress directory. */\\nif ( ! defined( \\'ABSPATH\\' ) ) {\\n\\tdefine( \\'ABSPATH\\', __DIR__ . \\'/\\' );\\n}\\n\\n/** Sets up WordPress vars and included files. */\\nrequire_once ABSPATH . \\'wp-settings.php\\';\\n', 'encoding': 'utf-8', 'st_mtime': '1776762595', 'force': '0'}", 12, 200, 210, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:15:53", "217.28.137.185:15163", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-config.php'}", 4, 200, 1821, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:53", "49.84.193.73:9670", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 314, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:54", "49.84.193.73:9671", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 39, 200, 2693, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:54", "49.84.193.73:9685", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 36, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:54", "49.84.193.73:9670", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '0', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 128, 200, 9118, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:57", "49.84.193.73:9690", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'free_waf'}", 10, 200, 905, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:57", "49.84.193.73:9690", "POST", "/plugin?action=a&name=free_waf", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:57", "49.84.193.73:9690", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'free_waf'}", 20, 200, 20085, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:59", "49.84.193.73:9690", "GET", "/free_waf/static/font_1474105_ofrmqg44wnb.css?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 3104, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:59", "49.84.193.73:9670", "GET", "/free_waf/static/jquery.fixedheadertable.min.js?_=1776762337011", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 14, 200, 3378, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:17:59", "49.84.193.73:9670", "POST", "/plugin?action=a&name=free_waf&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 51, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:18:00", "49.84.193.73:9690", "POST", "/plugin?action=a&name=free_waf&s=get_total_all", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1049, 200, 352, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:27", "49.84.193.73:9690", "POST", "/plugin?action=a&name=free_waf&s=san_dir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com'}", 143560, 200, 1512, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:35", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/Diff/Engine/shell.php'}", 4, 200, 1584, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:38", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/Sanitize.php'}", 5, 200, 6842, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:40", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/File.php'}", 4, 200, 4607, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:43", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/Invoker.php'}", 4, 200, 1037, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:46", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/ParameterResolver/DefaultValueResolver.php'}", 5, 200, 596, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:48", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Matcher.php'}", 4, 200, 1524, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:51", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/Assert.php'}", 6, 200, 9329, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:54", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestSuiteIterator.php'}", 3, 200, 746, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:20:58", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestBuilder.php'}", 4, 200, 1613, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:01", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestCase.php'}", 6, 200, 12396, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:04", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/Command.php'}", 5, 200, 7272, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:07", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/TestRunner.php'}", 8, 200, 7917, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:10", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Util/PHP/AbstractPhpProcess.php'}", 4, 200, 2687, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:13", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Util/Configuration.php'}", 7, 200, 6058, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:16", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/PrettyPrinterAbstract.php'}", 6, 200, 12026, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:19", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Lexer/TokenEmulator/NumericLiteralSeparatorEmulator.php'}", 4, 200, 1284, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:22", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Lexer/Emulative.php'}", 6, 200, 2187, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:26", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/TBSCertificate.php'}", 3, 200, 833, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:28", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/google-listings-and-ads/vendor/google/gax/src/ResourceTemplate/RelativeResourceTemplate.php'}", 6, 200, 4282, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:31", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/facebook-for-woocommerce/includes/Products/GoogleProductTaxonomy.php'}", 25, 200, 105951, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:39", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/essential-addons-for-elementor-lite/includes/Traits/Facebook_Feed.php'}", 4, 200, 3199, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:46", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/facebook-for-woocommerce/includes/Products/GoogleProductTaxonomy.php'}", 26, 200, 105951, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:58", "49.84.193.73:9690", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'webshell_check'}", 10, 200, 720, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:58", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:58", "49.84.193.73:9690", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'webshell_check'}", 12, 200, 5730, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:59", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 40, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:21:59", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 123, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:02", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 3404, 200, 2705, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:11", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=start_scan", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com'}", 664, 200, 69, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:11", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:12", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:15", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:17", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:19", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:20", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:21", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:23", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:25", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:26", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:27", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:29", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:31", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:32", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:34", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:35", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:37", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:38", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:39", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:42", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:42", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:44", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:45", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:46", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:48", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:49", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:51", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:52", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:53", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:54", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:55", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:57", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:58", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:22:59", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:00", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:02", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:04", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:06", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:07", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:10", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:11", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:18", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:18", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 23, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:18", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:19", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:20", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:20", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 33, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:20", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:22", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:23", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:24", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:25", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:28", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:29", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:30", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:31", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:33", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:35", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:37", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:38", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:39", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:41", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:43", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:44", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:46", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:47", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:49", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:49", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:51", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:52", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:54", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:55", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:56", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:23:58", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:01", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:01", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 26, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:03", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:04", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:05", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:07", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:08", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:10", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:11", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:12", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:14", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:15", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:17", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:18", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:19", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:21", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:23", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:24", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:26", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:29", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:29", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 40, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:31", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:32", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:34", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:35", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:37", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:38", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:39", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:41", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:42", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:43", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:45", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:48", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:48", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 18, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:49", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:51", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:52", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:53", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:55", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:56", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:58", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:24:59", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:01", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:02", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:04", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:05", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:07", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:08", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:10", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:12", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:13", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:15", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:17", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:17", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:18", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:20", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:23", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:24", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:26", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:27", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:28", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:29", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:31", "49.84.193.73:9690", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:32", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 102, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:33", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:35", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:36", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:38", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:39", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:40", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:42", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:43", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:44", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:47", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:49", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:50", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:52", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:54", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:55", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:56", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:25:58", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:00", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:01", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:03", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:04", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:05", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:07", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:08", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:10", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:11", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:13", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:16", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:17", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:18", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:19", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:21", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:22", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:24", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:25", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:27", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:28", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:29", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:31", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:32", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:34", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:35", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:37", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:38", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:39", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:41", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:42", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:44", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:45", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:47", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:49", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:51", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:52", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:53", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:54", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:56", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:57", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:58", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:26:59", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:00", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:02", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:04", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:05", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:07", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:08", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:12", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:12", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:13", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:15", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:17", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:18", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:20", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:20", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:22", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:23", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:25", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:26", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:27", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:28", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:29", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:31", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:32", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:34", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:35", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:37", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:38", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:40", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:41", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:43", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:44", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:46", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:47", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:50", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:52", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:54", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:55", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:56", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:27:59", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:00", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:01", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:03", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:04", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:06", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:07", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:08", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:10", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:12", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:13", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:16", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:17", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:19", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:20", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:21", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:23", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:24", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:26", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:27", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:28", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:29", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:31", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:32", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:33", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:35", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:36", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:38", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:39", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:41", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:43", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:44", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:45", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:47", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:50", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:50", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:52", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:54", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:55", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:56", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:57", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:28:59", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:01", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:02", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:04", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:05", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:06", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:08", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:09", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:10", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:12", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:13", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:16", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:17", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:19", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:20", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:23", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:24", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:27", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:27", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:28", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:30", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:33", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:34", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:36", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:37", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:39", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:40", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:41", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:43", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:44", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:45", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:46", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:49", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:51", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:53", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:54", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:56", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:57", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:29:59", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:01", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:03", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:04", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:06", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:07", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:08", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:10", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:11", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:13", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:15", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:17", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:19", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:20", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:22", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:24", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:25", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:26", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:28", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:29", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:31", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:32", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:34", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 26, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:35", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:37", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:38", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:40", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:41", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:43", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:44", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:45", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:47", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:48", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:50", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:51", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:53", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:54", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:56", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 22, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:57", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:30:59", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:00", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:02", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:04", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:06", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:08", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:09", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:11", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:11", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:13", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:15", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:16", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:18", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:19", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:21", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:22", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:23", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:25", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:26", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:28", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:29", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:31", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:32", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:33", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:35", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:36", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:38", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:39", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:40", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:42", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:44", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:45", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:46", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:48", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:49", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:51", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:53", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:55", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:57", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:31:59", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:01", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:03", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:05", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:07", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:09", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:10", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:12", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:15", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:15", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:17", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:19", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:21", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:22", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:24", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:26", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:28", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:30", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:32", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:33", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:35", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:37", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:39", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:41", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:43", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:45", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:45", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 66, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:47", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:49", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:50", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:52", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:54", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:55", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 20, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:56", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:57", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:32:59", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:02", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:04", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:05", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:06", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:07", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:10", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:13", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:15", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:18", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:18", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:19", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:22", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:25", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:27", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:29", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:31", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:32", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:35", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:36", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:37", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:39", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:40", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:42", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:43", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:46", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:47", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:48", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:51", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:53", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:55", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:56", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:57", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:33:59", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:00", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:02", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:03", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:04", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:06", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:07", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:08", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:10", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:11", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:13", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:15", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:17", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:18", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:20", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:21", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:23", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:24", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:25", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:27", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:29", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:30", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:31", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:33", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:34", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:36", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:37", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:38", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:40", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:41", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:43", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:44", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:45", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:47", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:48", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 9, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:49", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:51", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:52", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:54", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:55", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:56", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:58", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:34:59", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 23, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:00", "49.84.193.73:9671", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:01", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:03", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:04", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:05", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:11", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 4697, 200, 2665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:14", "49.84.193.73:9670", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 3451, 200, 2665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:14", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:15", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:22", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 6085, 200, 2665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:26", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 4001, 200, 2665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:32", "49.84.193.73:10714", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:38", "49.84.193.73:10714", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/themes/astra/page-https.php'}", 11, 200, 38306, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:35:56", "49.84.193.73:10714", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo.php'}", 9, 200, 24435, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:36:06", "49.84.193.73:10714", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo1.php'}", 7, 200, 23265, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:36:27", "49.84.193.73:10714", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo2.php'}", 7, 200, 20095, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:36:52", "49.84.193.73:10714", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo2.php', 'encoding': 'utf-8', 'data': '<?php\\n/* PHP File manager ver 1.4 */\\n\\n// Configuration \u00a1\u00aa do not change manually!\\n$authorization = \\'{\"authorize\":\"0\",\"login\":\"admin\",\"password\":\"phpfm\",\"cookie_name\":\"fm_user\",\"days_authorization\":\"30\",\"script\":\"<script type=\\\\\"text\\\\/javascript\\\\\" src=\\\\\"https:\\\\/\\\\/www.cdolivet.com\\\\/editarea\\\\/editarea\\\\/edit_area\\\\/edit_area_full.js\\\\\"><\\\\/script>\\\\r\\\\n<script language=\\\\\"Javascript\\\\\" type=\\\\\"text\\\\/javascript\\\\\">\\\\r\\\\neditAreaLoader.init({\\\\r\\\\nid: \\\\\"newcontent\\\\\"\\\\r\\\\n,display: \\\\\"later\\\\\"\\\\r\\\\n,start_highlight: true\\\\r\\\\n,allow_resize: \\\\\"both\\\\\"\\\\r\\\\n,allow_toggle: true\\\\r\\\\n,word_wrap: true\\\\r\\\\n,language: \\\\\"ru\\\\\"\\\\r\\\\n,syntax: \\\\\"php\\\\\"\\\\t\\\\r\\\\n,toolbar: \\\\\"search, go_to_line, |, undo, redo, |, select_font, |, syntax_selection, |, change_smooth_selection, highlight, reset_highlight, |, help\\\\\"\\\\r\\\\n,syntax_selection_allow: \\\\\"css,html,js,php,python,xml,c,cpp,sql,basic,pas\\\\\"\\\\r\\\\n});\\\\r\\\\n<\\\\/script>\"}\\';\\n$php_templates = \\'{\"Settings\":\"global $fm_config;\\\\r\\\\nvar_export($fm_config);\",\"Backup SQL tables\":\"echo fm_backup_tables();\"}\\';\\n$sql_templates = \\'{\"All ba -- >4096'}", 3643, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:36:54", "49.84.193.73:9690", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo2.php', 'encoding': 'utf-8', 'data': '<?php\\n/* PHP File manager ver 1.4 */\\n\\n// Configuration \u00a1\u00aa do not change manually!\\n$authorization = \\'{\"authorize\":\"0\",\"login\":\"admin\",\"password\":\"phpfm\",\"cookie_name\":\"fm_user\",\"days_authorization\":\"30\",\"script\":\"<script type=\\\\\"text\\\\/javascript\\\\\" src=\\\\\"https:\\\\/\\\\/www.cdolivet.com\\\\/editarea\\\\/editarea\\\\/edit_area\\\\/edit_area_full.js\\\\\"><\\\\/script>\\\\r\\\\n<script language=\\\\\"Javascript\\\\\" type=\\\\\"text\\\\/javascript\\\\\">\\\\r\\\\neditAreaLoader.init({\\\\r\\\\nid: \\\\\"newcontent\\\\\"\\\\r\\\\n,display: \\\\\"later\\\\\"\\\\r\\\\n,start_highlight: true\\\\r\\\\n,allow_resize: \\\\\"both\\\\\"\\\\r\\\\n,allow_toggle: true\\\\r\\\\n,word_wrap: true\\\\r\\\\n,language: \\\\\"ru\\\\\"\\\\r\\\\n,syntax: \\\\\"php\\\\\"\\\\t\\\\r\\\\n,toolbar: \\\\\"search, go_to_line, |, undo, redo, |, select_font, |, syntax_selection, |, change_smooth_selection, highlight, reset_highlight, |, help\\\\\"\\\\r\\\\n,syntax_selection_allow: \\\\\"css,html,js,php,python,xml,c,cpp,sql,basic,pas\\\\\"\\\\r\\\\n});\\\\r\\\\n<\\\\/script>\"}\\';\\n$php_templates = \\'{\"Settings\":\"global $fm_config;\\\\r\\\\nvar_export($fm_config);\",\"Backup SQL tables\":\"echo fm_backup_tables();\"}\\';\\n$sql_templates = \\'{\"All ba -- >4096'}", 3275, 200, 126, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:37:50", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo.php'}", 24, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:37:56", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 5316, 200, 2649, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:37:56", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo1.php'}", 19, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:00", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 3508, 200, 2627, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:00", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo1.php'}", 5, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:04", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo2.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:08", "49.84.193.73:10714", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 3601, 200, 2605, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:08", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/page-https.php'}", 14, 200, 38307, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:13", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/elementor/core/utils/svg/svg-sanitizer.php'}", 5, 200, 4766, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:17", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-conten1/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Environment.php'}", 5, 200, 5704, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:29", "49.84.193.73:9690", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3493, 200, 1989, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:36", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/class-wp-import.php'}", 6, 200, 14873, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:40", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/php-toolkit/DataLiberation/vendor-patched/brick/math/src/BigInteger.php'}", 5, 200, 6159, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:44", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/php-toolkit/DataLiberation/vendor-patched/brick/math/src/BigNumber.php'}", 4, 200, 3465, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:48", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/php-toolkit/DataLiberation/vendor-patched/brick/math/src/Internal/Calculator/NativeCalculator.php'}", 4, 200, 3109, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:38:53", "49.84.193.73:9690", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/Component/Host/IPv6AddressParser.php'}", 4, 200, 2549, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:39:15", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/backup_1776690520/class-wp-import.php'}", 7, 200, 14873, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:39:35", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/class-wp-import.php'}", 10, 200, 14872, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:39:47", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/gnahkni/admin/views/includes/protect-uploads-admin-sidebar.php'}", 4, 200, 3239, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:01", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Extension/CoreExtension.php'}", 7, 200, 12169, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:10", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/gnahkni/admin/views/includes/protect-uploads-admin-sidebar.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:15", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3619, 200, 1978, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:15", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Extension/CoreExtension.php'}", 6, 200, 12169, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:24", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/symfony/polyfill-php80/Resources/stubs/PhpToken.php'}", 27, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:30", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 5335, 200, 1977, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:30", "49.84.193.73:11635", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/URL.php'}", 17, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:30", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/State/RelativeState.php'}", 20, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:30", "49.84.193.73:11635", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/State/SchemeState.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:34", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3465, 200, 1992, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:38", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3442, 200, 1992, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:41", "49.84.193.73:11635", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3464, 200, 1992, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:41", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/State/RelativeSlashState.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:41", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/rowbot/url/src/State/RelativeSlashState.php'}", 6, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:41", "49.84.193.73:11635", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/brick/math/src/Internal/Calculator/NativeCalculator.php'}", 19, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:45", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3506, 200, 2002, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:45", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/brick/math/src/BigNumber.php'}", 20, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:50", "49.84.193.73:11635", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 4629, 200, 2007, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:50", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/class-wp-import.php'}", 26, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:50", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/contact-1776691119/php-toolkit/DataLiberation/vendor-patched/brick/math/src/BigInteger.php'}", 22, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:55", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 4785, 200, 2013, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:44:58", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3522, 200, 2013, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:02", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3608, 200, 2013, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:02", "49.84.193.73:11686", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Common/TargetRestrictionOperation/loadmodule.php'}", 11, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:13", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Common/TargetRestrictionOperation/loadmodule.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:17", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3476, 200, 1991, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:17", "49.84.193.73:11688", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Enums/BillingSetupStatusEnum/mamboxml.php'}", 3, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:23", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Enums/BillingSetupStatusEnum/mamboxml.php'}", 268, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:28", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 5439, 200, 1970, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:28", "49.84.193.73:11686", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/AdGroupBidModifierErrorEnum/autoblogged.php'}", 5, 200, 604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:35", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/AdGroupBidModifierErrorEnum/autoblogged.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:39", "49.84.193.73:11686", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3477, 200, 1951, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:39", "49.84.193.73:10141", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:39", "49.84.193.73:11688", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/DateErrorEnum/help.php'}", 2, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:43", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/DateErrorEnum/help.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:47", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3512, 200, 1930, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:47", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/SearchTermInsightErrorEnum/contentloader.php'}", 3, 200, 596, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:51", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/SearchTermInsightErrorEnum/contentloader.php'}", 24, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:55", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '2'}", 3635, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:45:58", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3527, 200, 2835, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:02", "49.84.193.73:11688", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/UserDataErrorEnum/smilies.inc.php'}", 3, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:06", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Errors/UserDataErrorEnum/smilies.inc.php'}", 20, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:10", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3470, 200, 2821, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:10", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Resources/AccessibleBiddingStrategy/menu.item.table.php'}", 3, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:14", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Resources/AccessibleBiddingStrategy/menu.item.table.php'}", 24, 200, 64, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:18", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3453, 200, 2803, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:18", "49.84.193.73:11688", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Resources/AdGroup/DemandGenAdGroupSettings/DemandGenChannelControls/Index.php'}", 4, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:22", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/src/Google/Ads/GoogleAds/V20/Resources/AdGroup/DemandGenAdGroupSettings/DemandGenChannelControls/Index.php'}", 31, 200, 64, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:27", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 4741, 200, 2778, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:27", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/ryqpzof/admin/views/includes/protect-uploads-admin-sidebar.php'}", 4, 200, 3239, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:33", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/ryqpzof/admin/views/includes/protect-uploads-admin-sidebar.php'}", 19, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:37", "49.84.193.73:11688", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3450, 200, 2779, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:37", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/ubked/admin/views/includes/protect-uploads-admin-sidebar.php'}", 3, 200, 3240, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:43", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/ubked/admin/views/includes/protect-uploads-admin-sidebar.php'}", 20, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:46", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3461, 200, 2778, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:46:46", "49.84.193.73:11688", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/assets/client/blocks/cart-link-style.asset.php'}", 3, 200, 465, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:02", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/assets/client/blocks/cart-link-style.asset.php'}", 3, 200, 465, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:10", "49.84.193.73:10141", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/assets/client/blocks/cart-link-style.asset.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\n return array('dependencies' => array('react-jsx-runtime', 'wp-block-editor', 'wp-blocks', 'wp-components', 'wp-element', 'wp-i18n', 'wp-polyfill', 'wp-primitives'), 'version' => 'd18d420c3b3b975750df');\\n\"}", 10, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:14", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/lib/classes/symfony/polyfill-php80/Resources/stubs/PhpToken.php'}", 4, 200, 355, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:18", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/lib/packages/Symfony/Polyfill/Php80/Resources/stubs/PhpToken.php'}", 4, 200, 367, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:22", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/packages/email-editor/vendor-prefixed/classes/symfony/polyfill-php80/Resources/stubs/PhpToken.php'}", 6, 200, 360, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:25", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/packages/email-editor/vendor-prefixed/packages/Symfony/Polyfill/Php80/Resources/stubs/PhpToken.php'}", 4, 200, 372, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:27", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/admin/class-yoast-notification-center.php'}", 5, 200, 5865, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:34", "49.84.193.73:10141", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/admin/class-yoast-notification-center.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * WPSEO plugin file.\\n *\\n * @package WPSEO\\\\Admin\\\\Notifications\\n */\\n\\nuse Yoast\\\\WP\\\\SEO\\\\Presenters\\\\Abstract_Presenter;\\n\\n/**\\n * Handles notifications storage and display.\\n */\\nclass Yoast_Notification_Center {\\n\\n\\t/**\\n\\t * Option name to store notifications on.\\n\\t *\\n\\t * @var string\\n\\t */\\n\\tpublic const STORAGE_KEY = 'yoast_notifications';\\n\\n\\t/**\\n\\t * The singleton instance of this object.\\n\\t *\\n\\t * @var Yoast_Notification_Center|null\\n\\t */\\n\\tprivate static $instance = null;\\n\\n\\t/**\\n\\t * Holds the notifications.\\n\\t *\\n\\t * @var Yoast_Notification[][]\\n\\t */\\n\\tprivate $notifications = [];\\n\\n\\t/**\\n\\t * Notifications there are newly added.\\n\\t *\\n\\t * @var array\\n\\t */\\n\\tprivate $new = [];\\n\\n\\t/**\\n\\t * Notifications that were resolved this execution.\\n\\t *\\n\\t * @var int\\n\\t */\\n\\tprivate $resolved = 0;\\n\\n\\t/**\\n\\t * Internal storage for transaction before notifications have been retrieved from storage.\\n\\t *\\n\\t * @var array\\n\\t */\\n\\tprivate $queued_transactions = [];\\n\\n\\t/**\\n\\t * Internal flag for whether notifications  -- >4096\"}", 15, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:37", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/admin/class-yoast-notification-center.php'}", 5, 200, 5852, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:42", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeTrashMySQL.class.php'}", 4, 200, 1196, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:46", "49.84.193.73:10141", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeTrashMySQL.class.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n\\n/**\\n * elFinder driver for trash bin at MySQL Database\\n *\\n * @author NaokiSawada\\n **/\\nclass elFinderVolumeTrashMySQL extends elFinderVolumeMySQL\\n{\\n    /**\\n     * Driver id\\n     * Must be started from letter and contains [a-z0-9]\\n     * Used as part of volume id.\\n     *\\n     * @var string\\n     **/\\n    protected $driverId = 'tm';\\n\\n    public function __construct()\\n    {\\n        parent::__construct();\\n        // original option of the Trash\\n        $this->options['lockEverything'] = false; // Lock all items in the trash to disable delete, move, rename.\\n\\n        // common options as the volume driver\\n        $this->options['alias'] = 'Trash';\\n        $this->options['quarantine'] = '';\\n        $this->options['rootCssClass'] = 'elfinder-navbar-root-trash';\\n        $this->options['copyOverwrite'] = false;\\n        $this->options['uiCmdMap'] = array('paste' => 'hidden', 'mkdir' => 'hidden', 'copy' => 'restore');\\n        $this->options['disabled'] = array('archive', 'duplicate', 'edit', 'extract', 'mkfile', 'places', 'put', 'rename', 'resize', 'upload');\\n    }\\n\\n    public function mount(array $opts)\\n    {\\n        if ($this->options['lockEverything']) {\\n            if (!is_array($opts['attributes'])) {\\n                $opts['attributes'] = array();\\n            }\\n            $attr = array(\\n                'pattern' => '/./',\\n                'locked' => true,\\n            );\\n            array_unshift($opts['attributes'], $attr);\\n        }\\n        // force set `copyJoin` to true\\n        $opts['copyJoin'] = true;\\n\\n        return parent::mount($opts);\\n    }\\n}\\n\"}", 11, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:49", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/plugins/Watermark/plugin.php'}", 4, 200, 3896, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:52", "49.84.193.73:10141", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/plugins/Watermark/plugin.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n\\n/**\\n * elFinder Plugin Watermark\\n * Print watermark on file upload.\\n * ex. binding, configure on connector options\\n *    $opts = array(\\n *        'bind' => array(\\n *            'upload.presave' => array(\\n *                'Plugin.Watermark.onUpLoadPreSave'\\n *            )\\n *        ),\\n *        // global configure (optional)\\n *        'plugin' => array(\\n *            'Watermark' => array(\\n *                'enable'         => true,       // For control by volume driver\\n *                'source'         => 'logo.png', // Path to Water mark image\\n *                'ratio'          => 0.2,        // Ratio to original image (ratio > 0 and ratio <= 1)\\n *                'position'       => 'RB',       // Position L(eft)/C(enter)/R(ight) and T(op)/M(edium)/B(ottom)\\n *                'marginX'        => 5,          // Margin horizontal pixel\\n *                'marginY'        => 5,          // Margin vertical pixel\\n *                'quality'        => 95,         //  -- >4096\"}", 12, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:55", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/plugins/Watermark/plugin.php'}", 5, 200, 3438, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:47:58", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/yjsfgtp/admin/views/includes/protect-uploads-admin-sidebar.php'}", 4, 200, 3239, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:04", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/yjsfgtp/admin/views/includes/protect-uploads-admin-sidebar.php'}", 21, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:08", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 3481, 200, 2764, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:09", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/inc/builder/controllers/class-astra-builder-ui-controller.php'}", 7, 200, 5807, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:13", "49.84.193.73:10141", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/inc/builder/controllers/class-astra-builder-ui-controller.php', 'encoding': 'utf-8', 'data': '<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * Astra Builder UI Controller.\\n *\\n * @package astra-builder\\n */\\n\\n// No direct access, please.\\nif ( ! defined( \\'ABSPATH\\' ) ) {\\n\\texit;\\n}\\n\\nif ( ! class_exists( \\'Astra_Builder_UI_Controller\\' ) ) {\\n\\n\\t/**\\n\\t * Class Astra_Builder_UI_Controller.\\n\\t */\\n\\tfinal class Astra_Builder_UI_Controller {\\n\\t\\t/**\\n\\t\\t * Astra SVGs.\\n\\t\\t *\\n\\t\\t * @var mixed ast_svgs\\n\\t\\t */\\n\\t\\tpublic static $ast_svgs = null;\\n\\n\\t\\t/**\\n\\t\\t * Get an SVG Icon\\n\\t\\t *\\n\\t\\t * @param string $icon the icon name.\\n\\t\\t * @param bool   $base if the baseline class should be added.\\n\\t\\t */\\n\\t\\tpublic static function fetch_svg_icon( $icon = \\'\\', $base = true ) {\\n\\t\\t\\t$output = \\'<span aria-hidden=\"true\" class=\"ahfb-svg-iconset ast-inline-flex\\' . ( $base ? \\' svg-baseline\\' : \\'\\' ) . \\'\">\\';\\n\\n\\t\\t\\t/** @psalm-suppress DocblockTypeContradiction */ // phpcs:ignore Generic.Commenting.DocComment.MissingShort\\n\\t\\t\\tif ( ! self::$ast_svgs ) {\\n\\t\\t\\t\\tob_start();\\n\\t\\t\\t\\tinclude_once ASTRA_THEME_DIR . \\'assets/svg/svgs.json\\'; // phpcs:ignore WPThemeReview.CoreFunctional -- >4096'}", 15, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:18", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo3.php'}", 38, 200, 223621, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:32", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-solo/solo3.php'}", 23, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:48:37", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '3'}", 4128, 200, 2748, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:49:39", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/consultstreet/inc/customizer/webfont.php'}", 5, 200, 5900, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:49:53", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/elementor/core/utils/svg/svg-sanitizer.php'}", 6, 200, 4766, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:04", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/Invoker.php'}", 4, 200, 1037, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:06", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/essential-addons-for-elementor-lite/includes/Classes/Plugin_Usage_Tracker.php'}", 6, 200, 11065, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:11", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/essential-addons-for-elementor-lite/includes/Traits/Ajax_Handler.php'}", 8, 200, 7715, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:14", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/essential-addons-for-elementor-lite/includes/Traits/Facebook_Feed.php'}", 6, 200, 3199, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:18", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/facebook-for-woocommerce/includes/Admin/Settings_Screens/Product_Attributes.php'}", 5, 200, 8513, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:21", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/class_fma_admin_menus.php'}", 6, 200, 8450, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:24", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Internal/PrintableNewAnonClassNode.php'}", 4, 200, 940, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:27", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Lexer/Emulative.php'}", 4, 200, 2187, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:31", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/PrettyPrinterAbstract.php'}", 6, 200, 12027, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:50:35", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Matcher.php'}", 4, 200, 1524, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:27", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestSuiteIterator.php'}", 4, 200, 746, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:30", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/Command.php'}", 5, 200, 7272, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:34", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/TestRunner.php'}", 5, 200, 7917, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:38", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Util/PHP/AbstractPhpProcess.php'}", 4, 200, 2687, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:41", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/filester/includes/cross.php'}", 4, 200, 4275, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:44", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/google-listings-and-ads/vendor/composer/autoload_classmap.php'}", 17, 200, 44245, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:50", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/google-listings-and-ads/vendor/google/gax/src/ResourceTemplate/RelativeResourceTemplate.php'}", 4, 200, 4282, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:53", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/google-listings-and-ads/vendor/symfony/polyfill-php80/Resources/stubs/PhpToken.php'}", 4, 200, 345, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:51:56", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/kliken-ads-pixel-for-meta/pages/getstarted.php'}", 7, 200, 17331, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:52:03", "49.84.193.73:10141", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '4'}", 3439, 200, 1922, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:18", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes2/blocks/social-link.php'}", 12, 200, 23248, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:22", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes2/formatting.php'}", 49, 200, 55881, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:29", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/tiktok-for-business/admin/Tt4b_Menu_Class.php'}", 5, 200, 6066, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:32", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/i18n/locale-info.php'}", 6, 200, 6871, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:35", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/i18n/states.php'}", 8, 200, 20953, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:39", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-api-keys.php'}", 4, 200, 2459, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:42", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-webhooks-table-list.php'}", 4, 200, 3213, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:45", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/admin/class-wc-admin-webhooks-table-list.php'}", 4, 200, 3213, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:47", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-coupon-data.php'}", 4, 200, 3744, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:50", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/admin/meta-boxes/class-wc-meta-box-product-data.php'}", 7, 200, 5608, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:54", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/class-wc-ajax.php'}", 12, 200, 21589, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:57", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/class-wc-ajax.php'}", 13, 200, 21589, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:54:59", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/class-wc-geo-ip.php'}", 5, 200, 6909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:01", "49.84.193.73:10141", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/wp-content/plugins/woocommerce/includes/class-wc-shipping-zone.php'}", 4, 200, 3338, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:06", "49.84.193.73:10141", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 66, 200, 1907, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:07", "49.84.193.73:10141", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 14, 200, 490, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:07", "49.84.193.73:10368", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 37, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:08", "49.84.193.73:10373", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:08", "49.84.193.73:10141", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 5, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10141", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 61, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10373", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 27, 200, 1047, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10372", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 8, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10369", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 84, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10371", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 140, 200, 322, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:09", "49.84.193.73:10371", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:10", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 11, 200, 654, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:11", "49.84.193.73:10371", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 5, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:13", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 13, 200, 1088, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:40", "49.84.193.73:10372", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:42", "49.84.193.73:10371", "POST", "/files?action=SetBatchData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'data': '[\"backup_1776690520\",\"backup_1776690826\",\"contact-1776691119\",\"gnahkni\",\"jqlnqlb\",\"ryqpzof\",\"wp-solo\",\"xm0v3qr2tbc4kztgfgvf\",\"yjsfgtp\"]', 'type': '4', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 274, 200, 124, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:42", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 8, 200, 919, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:46", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/fx8vv0x569vkotw3cmy4'}", 10, 200, 530, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:47", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 12, 200, 919, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:51", "49.84.193.73:10371", "POST", "/files?action=DeleteDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/fx8vv0x569vkotw3cmy4'}", 43, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:55:57", "49.84.193.73:10371", "POST", "/files?action=DeleteDir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/ubked'}", 32, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:03", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/tiktok-for-business'}", 8, 200, 802, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:07", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 12, 200, 880, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:12", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/akismet'}", 8, 200, 745, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:16", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins'}", 8, 200, 880, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:23", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester'}", 11, 200, 665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:26", "49.84.193.73:10371", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/i18n'}", 7, 200, 531, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:34", "49.84.193.73:10372", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 105, 200, 1908, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:34", "49.84.193.73:10373", "POST", "/crontab?action=get_crontab_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 23, 200, 27, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:34", "49.84.193.73:10369", "POST", "/crontab?action=get_crontab_service", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 50, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 17:56:34", "49.84.193.73:10371", "POST", "/crontab?action=GetCrontab", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'count': '20', 'search': '', 'type_id': '', 'order_param': ''}", 185, 200, 821, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-04-21 18:03:15", "49.84.193.73:10693", "GET", "/ws_panel?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 390604, 200, 1, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]