ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31

Name	Size	Perm	Actions
📁 seo	-	0755	🗑️ 🏷️
📁 well-known	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0777	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📄 .user.ini	0.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 admin.php	32.33 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 adminfuns.php	24.51 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 asd.php	143.87 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 async-upload.php	2.02 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 connects.php	4.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 css	1.68 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 dataxy.php	37.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 dex.php	77.67 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit.php	169.12 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	14.36 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 ioxi-o.php	966.6 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 kk.php	3.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 link-parse-opml.php	53.15 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 lock360.php	47.7 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 moddofuns.php	5.36 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 my-sites.php	161.74 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 siteheads.php	168.08 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 thoms.php	399.45 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 worksec.php	1.06 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.54 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.61 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	5.02 KB	0600	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php..	3.56 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-editor.php	53.71 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-l0gin.php	170.48 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	51.3 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-set.php	181.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	32.38 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-sign.php	181.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	34.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	70.92 KB	0000	🗑️ 🏷️ ⬇️ ✏️

Edit: da88.meme.log

162.158.19.108 - - [04/Nov/2026:00:09:28 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
172.68.150.28 - - [04/Nov/2026:00:13:08 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0"
172.68.150.28 - - [04/Nov/2026:00:13:12 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 200 37 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)"
172.70.176.126 - - [04/Nov/2026:00:17:36 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
172.68.150.28 - - [04/Nov/2026:00:17:39 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
172.64.200.58 - - [04/Nov/2026:00:18:54 +0000] "GET /index.php/jk HTTP/1.1" 301 13 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:74.0) Gecko/20100101 Firefox/74.0"
172.64.200.58 - - [04/Nov/2026:00:18:55 +0000] "GET /jk HTTP/1.1" 404 146 "https://da88.meme/index.php/jk" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:74.0) Gecko/20100101 Firefox/74.0"
104.22.102.83 - - [04/Nov/2026:00:28:08 +0000] "GET /goods.php?sitemap541.xml HTTP/1.1" 200 44 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
172.68.150.28 - - [04/Nov/2026:00:28:50 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
172.68.150.28 - - [04/Nov/2026:00:28:52 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
172.70.176.126 - - [04/Nov/2026:00:30:10 +0000] "GET /product001 HTTP/1.1" 200 40624 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
172.68.150.28 - - [04/Nov/2026:00:30:15 +0000] "GET / HTTP/1.1" 200 39698 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
172.68.150.28 - - [04/Nov/2026:00:30:18 +0000] "GET /product001 HTTP/1.1" 200 40292 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
172.70.176.126 - - [04/Nov/2026:00:30:23 +0000] "GET / HTTP/1.1" 200 39736 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
141.101.105.47 - - [04/Nov/2026:00:30:24 +0000] "GET / HTTP/1.1" 301 162 "http://da88.meme/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0"
172.68.50.37 - - [04/Nov/2026:00:30:26 +0000] "GET / HTTP/1.1" 200 16632 "https://da88.meme/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0"
172.71.219.90 - - [04/Nov/2026:00:30:58 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37459 "-" "-"
162.158.108.91 - - [04/Nov/2026:00:33:33 +0000] "POST /wp-cron.php?doing_wp_cron=1793752413.0625219345092773437500 HTTP/1.1" 200 31 "-" "WordPress/7.1.4; https://da88.meme"
172.70.46.100 - - [04/Nov/2026:00:33:33 +0000] "GET / HTTP/1.1" 200 16622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.23.172.68 - - [04/Nov/2026:00:33:36 +0000] "GET /livewire/update HTTP/1.1" 404 146 "-" "Mozilla/5.0"
172.71.102.154 - - [04/Nov/2026:00:33:38 +0000] "GET /login HTTP/1.1" 302 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.102.154 - - [04/Nov/2026:00:33:39 +0000] "GET /wp-login.php HTTP/1.1" 404 34 "https://da88.meme/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.102.154 - - [04/Nov/2026:00:33:40 +0000] "GET /login/livewire/update HTTP/1.1" 404 146 "-" "Mozilla/5.0"
172.71.183.97 - - [04/Nov/2026:00:33:43 +0000] "GET /admin/login HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.183.97 - - [04/Nov/2026:00:33:44 +0000] "GET /admin/login/livewire/update HTTP/1.1" 404 146 "-" "Mozilla/5.0"
162.159.113.7 - - [04/Nov/2026:00:33:47 +0000] "GET /register HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
162.159.113.7 - - [04/Nov/2026:00:33:48 +0000] "GET /register/livewire/update HTTP/1.1" 404 146 "-" "Mozilla/5.0"
172.71.102.154 - - [04/Nov/2026:00:33:50 +0000] "GET / HTTP/1.1" 200 16624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.64.217.75 - - [04/Nov/2026:00:36:08 +0000] "GET /blog-da88/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
172.70.216.144 - - [04/Nov/2026:00:36:54 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0"
162.158.108.91 - - [04/Nov/2026:00:36:56 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
104.22.66.81 - - [04/Nov/2026:00:36:57 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
162.158.108.91 - - [04/Nov/2026:00:36:57 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.70.216.144 - - [04/Nov/2026:00:36:57 +0000] "POST /ioxi-o.php HTTP/1.1" 200 7860 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0"
172.68.164.36 - - [04/Nov/2026:00:36:57 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.70.216.144 - - [04/Nov/2026:00:36:57 +0000] "POST /ioxi-o.php HTTP/1.1" 200 3863 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0"
104.22.66.81 - - [04/Nov/2026:00:36:57 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
162.158.88.163 - - [04/Nov/2026:00:36:58 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.70.216.144 - - [04/Nov/2026:00:36:58 +0000] "POST /ioxi-o.php HTTP/1.1" 200 165 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0"
172.70.216.144 - - [04/Nov/2026:00:36:58 +0000] "POST /ioxi-o.php HTTP/1.1" 200 160 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36 Edg/156.0.0.0"
141.101.95.40 - - [04/Nov/2026:00:38:39 +0000] "GET / HTTP/1.1" 200 16622 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
162.159.98.5 - - [04/Nov/2026:00:42:28 +0000] "GET /44.php HTTP/1.1" 200 2873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
172.71.210.140 - - [04/Nov/2026:00:42:31 +0000] "GET /favicon.ico HTTP/1.1" 302 13 "https://da88.meme/44.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
172.68.150.28 - - [04/Nov/2026:00:44:08 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
172.70.176.126 - - [04/Nov/2026:00:44:10 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 200 37 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; ja-jp) AppleWebKit/523.12 (KHTML, like Gecko) Version/3.0.4 Safari/523.12"
172.68.163.134 - - [04/Nov/2026:00:46:09 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
172.68.163.134 - - [04/Nov/2026:00:46:28 +0000] "POST /ioxi-o.php HTTP/1.1" 200 7870 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:00:46:28 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
162.158.106.125 - - [04/Nov/2026:00:46:29 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.71.81.46 - - [04/Nov/2026:00:46:29 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.68.164.36 - - [04/Nov/2026:00:46:29 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.70.142.110 - - [04/Nov/2026:00:46:29 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
162.158.108.91 - - [04/Nov/2026:00:46:29 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.68.163.134 - - [04/Nov/2026:00:46:29 +0000] "POST /ioxi-o.php HTTP/1.1" 200 165 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
172.68.163.134 - - [04/Nov/2026:00:46:29 +0000] "POST /ioxi-o.php HTTP/1.1" 200 160 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
172.68.163.134 - - [04/Nov/2026:00:46:59 +0000] "POST /ioxi-o.php HTTP/1.1" 200 165 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
104.22.118.129 - - [04/Nov/2026:00:57:48 +0000] "GET /webshell.php HTTP/1.1" 404 146 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
172.70.208.19 - - [04/Nov/2026:01:03:21 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:22 +0000] "GET / HTTP/1.1" 200 16618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:23 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:24 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 200 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:24 +0000] "GET / HTTP/1.1" 200 16618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:25 +0000] "GET //?author=1 HTTP/1.1" 301 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:26 +0000] "GET //?author=2 HTTP/1.1" 301 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:27 +0000] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.71.81.46 - - [04/Nov/2026:01:03:27 +0000] "POST //xmlrpc.php HTTP/1.1" 200 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
104.22.31.108 - - [04/Nov/2026:01:05:29 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
162.159.102.127 - - [04/Nov/2026:01:10:17 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
104.22.102.84 - - [04/Nov/2026:01:14:21 +0000] "GET / HTTP/1.1" 200 16622 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
172.68.150.28 - - [04/Nov/2026:01:15:45 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; ja-jp) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16"
172.70.176.126 - - [04/Nov/2026:01:15:47 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 200 37 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/10.04 Chromium/15.0.874.106 Chrome/15.0.874.106 Safari/535.2"
172.71.183.97 - - [04/Nov/2026:01:19:50 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
162.159.114.115 - - [04/Nov/2026:01:20:04 +0000] "GET / HTTP/1.1" 200 16622 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
104.23.168.112 - - [04/Nov/2026:01:20:24 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
172.70.176.126 - - [04/Nov/2026:01:20:48 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
172.68.150.28 - - [04/Nov/2026:01:20:50 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
104.22.109.2 - - [04/Nov/2026:01:22:59 +0000] "POST /xmlrpc.php HTTP/1.1" 200 227 "-" "Go-http-client/1.1"
104.23.243.106 - - [04/Nov/2026:01:23:34 +0000] "GET /goods.php HTTP/1.1" 200 22770 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
172.71.170.9 - - [04/Nov/2026:01:27:18 +0000] "GET /robots.txt HTTP/1.1" 200 335 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
172.69.11.112 - - [04/Nov/2026:01:30:05 +0000] "GET /webshell HTTP/1.1" 404 146 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
104.22.109.2 - - [04/Nov/2026:01:32:41 +0000] "GET /wp-login.php HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
172.69.165.40 - - [04/Nov/2026:01:35:36 +0000] "POST /wp-cron.php?doing_wp_cron=1793756135.8720099925994873046875 HTTP/1.1" 200 31 "-" "WordPress/7.1.4; https://da88.meme"
172.68.174.95 - - [04/Nov/2026:01:35:36 +0000] "GET /top-keo-nha-cai/ HTTP/1.1" 301 13 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
172.64.217.75 - - [04/Nov/2026:01:35:39 +0000] "GET /2025/02/10/top-keo-nha-cai/ HTTP/1.1" 200 17670 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
172.68.238.74 - - [04/Nov/2026:01:35:39 +0000] "GET / HTTP/1.1" 200 16628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
172.68.238.74 - - [04/Nov/2026:01:35:42 +0000] "GET /wp-login.php?action=register HTTP/1.1" 404 548 "https://da88.meme" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
172.68.238.74 - - [04/Nov/2026:01:35:43 +0000] "GET /wp-login.php?action=register HTTP/1.1" 404 548 "https://da88.meme/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
162.158.95.245 - - [04/Nov/2026:01:36:27 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.68.194.208 - - [04/Nov/2026:01:36:29 +0000] "GET / HTTP/1.1" 200 16629 "http://da88.meme" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.71.195.2 - - [04/Nov/2026:01:36:44 +0000] "GET /wp-login.php HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
172.71.195.2 - - [04/Nov/2026:01:36:46 +0000] "POST /wp-login.php HTTP/1.1" 404 34 "https://da88.meme/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
172.71.223.97 - - [04/Nov/2026:01:37:18 +0000] "GET /wp-login.php HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
172.71.223.97 - - [04/Nov/2026:01:37:20 +0000] "POST /wp-login.php HTTP/1.1" 404 34 "https://da88.meme/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
172.70.34.108 - - [04/Nov/2026:01:42:49 +0000] "GET /shell HTTP/1.1" 404 146 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
172.71.191.119 - - [04/Nov/2026:01:44:22 +0000] "GET /goods.php?sitemap541.xml HTTP/1.1" 200 44 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)"
172.68.218.147 - - [04/Nov/2026:01:44:56 +0000] "GET /edit.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
172.68.218.147 - - [04/Nov/2026:01:44:57 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
172.68.218.147 - - [04/Nov/2026:01:44:57 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
172.68.218.146 - - [04/Nov/2026:01:45:12 +0000] "GET /ioxi-o.php HTTP/1.1" 200 37460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.68.218.147 - - [04/Nov/2026:01:45:13 +0000] "GET /edit.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.68.218.147 - - [04/Nov/2026:01:45:13 +0000] "POST /ioxi-o.php HTTP/1.1" 200 7857 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.71.81.181 - - [04/Nov/2026:01:45:13 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.71.81.182 - - [04/Nov/2026:01:45:13 +0000] "POST //ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.69.166.5 - - [04/Nov/2026:01:45:13 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.69.176.64 - - [04/Nov/2026:01:45:13 +0000] "POST //ALFA_DATA/alfacgiapi/py.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.69.176.64 - - [04/Nov/2026:01:45:14 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.68.164.36 - - [04/Nov/2026:01:45:14 +0000] "POST //ALFA_DATA/alfacgiapi/bash.alfa HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)"
172.68.218.147 - - [04/Nov/2026:01:45:14 +0000] "POST /ioxi-o.php HTTP/1.1" 200 165 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.68.218.147 - - [04/Nov/2026:01:45:14 +0000] "POST /ioxi-o.php HTTP/1.1" 200 160 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.68.218.146 - - [04/Nov/2026:01:45:15 +0000] "POST /ioxi-o.php HTTP/1.1" 200 3863 "https://da88.meme/ioxi-o.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.68.218.192 - - [04/Nov/2026:01:45:15 +0000] "GET /favicon.ico HTTP/1.1" 302 13 "https://da88.meme/edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36"
172.70.176.126 - - [04/Nov/2026:01:46:46 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 499 0 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.107 Safari/535.1"
172.70.176.126 - - [04/Nov/2026:01:46:52 +0000] "GET /wp-content/pl8501d4/edit.php HTTP/1.1" 200 37 "https://da88.meme/wp-content/pl8501d4/edit.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"

Fatal error: Uncaught Error: Call to undefined function wp_check_php_mysql_versions() in /www/wwwroot/23winw.org/wp-settings.php:40 Stack trace: #0 /www/wwwroot/23winw.org/wp-config.php(104): require_once() #1 {main} thrown in /www/wwwroot/23winw.org/wp-settings.php on line 40

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.3.31

Edit: da88.meme.log

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31