["2025-11-06 09:48:38", "49.85.250.57:60005", "GET", "/44ca00e1?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 84, 200, 6403, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:39", "49.85.250.57:60015", "GET", "/code?t=1762393719825", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 1, 200, 0, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:44", "49.85.250.57:60011", "POST", "/login?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'safe_mode': '1', 'username': '******', 'password': '******'}", 685, 200, 381, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:45", "49.85.250.57:60011", "GET", "/?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 99, 200, 2670, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:49", "49.85.250.57:60014", "GET", "/software?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 4, 200, 1513, "text/html; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:50", "49.85.250.57:60005", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 147, 200, 1546, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:50", "49.85.250.57:60015", "POST", "/config?action=get_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0', 'software_name': 'panel'}", 4, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:50", "49.85.250.57:60014", "POST", "/panel/overview/GetOverview?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 65, 200, 288, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:50", "49.85.250.57:60005", "POST", "/plugin?action=get_index_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 16, 200, 1280, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:51", "49.85.250.57:60011", "POST", "/system?action=GetNetWork", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 1038, 200, 819, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:51", "49.85.250.57:60016", "POST", "/plugin?action=get_soft_list_thread", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'cid': '60057827718201'}", 13, 200, 29, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:51", "49.85.250.57:60016", "POST", "/panel/public/get_exp_ltd?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 4, 200, 106, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:51", "49.85.250.57:60005", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'sName': 'task_manager'}", 20, 200, 901, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:52", "49.85.250.57:60016", "POST", "/mod/push/task/get_task_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 14, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:52", "49.85.250.57:60014", "POST", "/ajax?action=get_pay_type", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 17, 200, 1615, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:52", "49.85.250.57:60016", "POST", "/config?action=stop_nps", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'software_name': 'panel'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:52", "49.85.250.57:60014", "POST", "/config?action=get_nps_new", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'version': '-1', 'product_type': '0'}", 628, 200, 357, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:53", "49.85.250.57:60005", "POST", "/system?action=upgrade_panel", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'check': 'true'}", 876, 200, 1038, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:54", "49.85.250.57:60014", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 46, 200, 1545, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:54", "49.85.250.57:60005", "POST", "/site?action=get_site_types", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 5, 200, 101, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:54", "49.85.250.57:60014", "POST", "/panel/public/get_soft_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'name': 'web'}", 4, 200, 154, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:54", "49.85.250.57:60011", "POST", "/auth?action=get_coupon_list", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 669, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:55", "49.85.250.57:60005", "POST", "/datalist/data/get_data_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'type': '-1', 'search': '', 'p': '1', 'limit': '10', 'table': 'sites', 'order': ''}", 21, 200, 483, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:55", "49.85.250.57:60011", "POST", "/project/scanning/list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 29, 200, 107, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:57", "49.85.250.57:60005", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 55, 200, 1545, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:58", "49.85.250.57:60005", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 8, 200, 982, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:58", "49.85.250.57:60011", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 13, 200, 320, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:58", "49.85.250.57:60016", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'status': '-3'}", 5, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:58", "49.85.250.57:60012", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 8, 200, 921, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:48:58", "49.85.250.57:60014", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:01", "49.85.250.57:60005", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 48, 200, 1546, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:01", "49.85.250.57:60014", "POST", "/safe/ssh/GetSshInfo?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 38, 200, 133, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:01", "49.85.250.57:60012", "POST", "/mod/ssh/com/get_ssh_intrusion?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 65, 200, 65, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:01", "49.85.250.57:60011", "POST", "/ssh_security?action=get_login_send", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 8, 200, 17, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:01", "49.85.250.57:60005", "POST", "/ssh_security?action=get_config", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 6, 200, 415, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:05", "49.85.250.57:60005", "POST", "/firewall?action=SetSshStatus", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'status': '1'}", 780, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:05", "49.85.250.57:60005", "POST", "/safe/ssh/GetSshInfo?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 29, 200, 134, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:08", "49.85.250.57:60011", "POST", "/firewall/com/get_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 84, 200, 104, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:08", "49.85.250.57:60012", "POST", "/firewall/com/get_firewall_info?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 139, 200, 132, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:08", "49.85.250.57:60005", "POST", "/firewall/com/port_rules_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'chain': 'ALL', 'p': '1', 'row': '20', 'query': ''}", 13, 200, 389, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:16", "49.85.250.57:60005", "POST", "/firewall/com/modify_port_rule?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'old_data': '{\"Protocol\":\"tcp\",\"Port\":\"22\",\"Strategy\":\"accept\",\"Family\":\"ipv4\",\"Address\":\"all\",\"Chain\":\"INPUT\",\"id\":9,\"sid\":0,\"brief\":\"SSH\u8fdc\u7a0b\u670d\u52a1\",\"domain\":\"\",\"status\":0,\"addtime\":\"2025-10-21 15:27:50\",\"keys_scopes_status\":false,\"key\":\"22_9_ipv4\",\"isEdit\":true}', 'new_data': '{\"protocol\":\"tcp\",\"port\":\"22\",\"choose\":\"all\",\"types\":\"drop\",\"brief\":\"SSH\u8fdc\u7a0b\u670d\u52a1\",\"domain\":\"\",\"chain\":\"INPUT\",\"operation\":\"add\",\"strategy\":\"drop\",\"id\":9}'}", 1488, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:17", "49.85.250.57:60005", "POST", "/firewall/com/port_rules_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'chain': 'ALL', 'p': '1', 'row': '20', 'query': ''}", 19, 200, 392, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:17", "49.85.250.57:60012", "POST", "/firewall/com/get_firewall_info?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 52, 200, 132, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:17", "49.85.250.57:60012", "POST", "/firewall/com/get_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 18, 200, 104, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:32", "49.85.250.57:60012", "POST", "/firewall/com/modify_port_rule?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'old_data': '{\"Protocol\":\"tcp\",\"Port\":\"888\",\"Strategy\":\"accept\",\"Family\":\"ipv4\",\"Address\":\"all\",\"Chain\":\"INPUT\",\"id\":0,\"sid\":0,\"brief\":\"phpMyAdmin\u9ed8\u8ba4\u7aef\u53e3\",\"domain\":\"\",\"status\":2,\"addtime\":\"--\",\"keys_scopes_status\":false,\"key\":\"888_0_ipv4\",\"isEdit\":true}', 'new_data': '{\"protocol\":\"tcp\",\"port\":\"888\",\"choose\":\"all\",\"types\":\"drop\",\"brief\":\"phpMyAdmin\u9ed8\u8ba4\u7aef\u53e3\",\"domain\":\"\",\"chain\":\"INPUT\",\"operation\":\"add\",\"strategy\":\"drop\",\"id\":0}'}", 1053, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:32", "49.85.250.57:60012", "POST", "/firewall/com/port_rules_list?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'chain': 'ALL', 'p': '1', 'row': '20', 'query': ''}", 19, 200, 421, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:32", "49.85.250.57:60005", "POST", "/firewall/com/get_firewall_info?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 61, 200, 132, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:33", "49.85.250.57:60005", "POST", "/firewall/com/get_status?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 18, 200, 104, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:39", "49.85.250.57:60005", "POST", "/panel/public/get_public_config?", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 47, 200, 1545, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:40", "49.85.250.57:60014", "POST", "/task?action=get_task_lists", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'status': '-3'}", 4, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:40", "49.85.250.57:60012", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 5, 200, 981, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:40", "49.85.250.57:60015", "POST", "/plugin?action=get_soft_find", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'sName': 'disk_analysis'}", 6, 200, 921, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:40", "49.85.250.57:60011", "POST", "/system?action=GetDiskInfo", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 12, 200, 320, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:40", "49.85.250.57:60011", "POST", "/files?action=get_files_store", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{}", 2, 200, 2, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:44", "49.85.250.57:60011", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com', 'search': ''}", 7, 200, 981, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:44", "49.85.250.57:60012", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 7, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:45", "49.85.250.57:60011", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/index.php'}", 4, 200, 332, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:45", "49.85.250.57:60014", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/index.php'}", 5, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:53", "49.85.250.57:60011", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:53", "49.85.250.57:60005", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com', 'search': ''}", 6, 200, 981, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:53", "49.85.250.57:60011", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/xmlrpc.php'}", 3, 200, 1445, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:49:54", "49.85.250.57:60011", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/xmlrpc.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:06", "49.85.250.57:60011", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-includes'}", 16, 200, 5308, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:13", "49.85.250.57:60011", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 10, 200, 983, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:15", "49.85.250.57:60011", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 5, 200, 568, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:16", "49.85.250.57:60011", "POST", "/files?action=get_images_resize", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'return_type': 'base64', 'height': '45', 'width': '45', 'files': 'logo.jpg', 'path': '/www/wwwroot/dewenlabels.com/wp-content'}", 148, 200, 77, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:18", "49.85.250.57:60014", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:18", "49.85.250.57:60011", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-content', 'search': ''}", 6, 200, 568, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:18", "49.85.250.57:60011", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-content/index.php'}", 3, 200, 469, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:19", "49.85.250.57:60011", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-content/index.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:40", "49.85.250.57:60011", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com'}", 6, 200, 983, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:42", "49.85.250.57:60011", "POST", "/files?action=GetDirNew", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'path': '/www/wwwroot/dewenlabels.com/wp-admin'}", 9, 200, 2151, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:49", "49.85.250.57:60014", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/server/panel/BTPanel/static/editor/ace.editor.config.json'}", 3, 200, 1117, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:49", "49.85.250.57:60011", "POST", "/files?action=GetDirNew&tojs=GetFiles", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'p': '1', 'showRow': '500', 'sort': 'name', 'reverse': 'False', 'path': '/www/wwwroot/dewenlabels.com/wp-admin', 'search': ''}", 8, 200, 2151, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:50", "49.85.250.57:60014", "POST", "/files?action=GetFileBody", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'path': '/www/wwwroot/dewenlabels.com/wp-admin/index.php'}", 3, 200, 2884, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]
["2025-11-06 09:50:50", "49.85.250.57:60014", "POST", "/files?action=file_history", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36", "{'name': 'undefined', 'path': '/www/wwwroot/dewenlabels.com/wp-admin/index.php'}", 3, 200, 51, "application/json; charset=utf-8", "47.254.126.238:42291", "None"]