File: //var/lib/modsecurity/audit/20260107/20260107-0337/20260107-033726-aV4bRrhenDUAADIHEAoAAAAr
--32a1cf2f-A--
[07/Jan/2026:03:37:26 --0500] aV4bRrhenDUAADIHEAoAAAAr 45.3.51.126 33978 127.0.0.190 80
--32a1cf2f-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 45.3.51.126
Host: www.tubethug.com
Connection: close
Content-Length: 95819
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1767947808%7CMhFzG0TbE9uXr2wmdSMjMhOjeogq4OOdk5epn21pBPQ%7C0617bae3e2a1ed4204aa87e7acac63f2a6f4f93d7caa0fcff0c7a9b91d0657ab; wordpress_logged_in_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1767947808%7CMhFzG0TbE9uXr2wmdSMjMhOjeogq4OOdk5epn21pBPQ%7C17787e9f29f6bb6bc9170db6786d94276c40f05ef0a49eecef3033a5754bb6b0; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-1=1767775009; wp-settings-1=posts_list_mode%3Dlist
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.tubethug.com
Referer: http://www.tubethug.com/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=61faa826542a47a09fb67a3c5096f423
--32a1cf2f-C--
--61faa826542a47a09fb67a3c5096f423
Content-Disposition: form-data; name="_wpnonce"
2cb3452c48
--61faa826542a47a09fb67a3c5096f423
Content-Disposition: form-data; name="_wp_http_referer"
/wp-admin/plugin-install.php?tab=upload
--61faa826542a47a09fb67a3c5096f423
Content-Disposition: form-data; name="pluginzip"; filename="security_1767775031.zip"
Content-Type: application/octet-stream
PK D'\} - security_1767775031/class.drop-down-pages.php}UQo6~ׯF)K
F ͅ#t=Rd8w}G}w^$Jìږ0+d{t)A&_\(P:=?asz,TdfI~>LO;Fl@#3\HoɪjߞY r^,x]z_W#A!V!:K3:lj"JR*LBydE>q;|eH(0e*UKpkiCN5M],2B5)CmyA-<ԫ2Bz4(C``T\ ьLWp~Ңc0|spUMf~; ˀ
8`
:Imo6Q{F`6r=ɘapzA`ڠ`#
n}X_DGmdH[d{!G3"wȌϛ'
44_
r^R^ܸѮI[i[
AnȗJԫ{+Ssg#W8'ݓ,tr4wZT4~Y7-rOmJ/Y*
x#߈..,v( Ȱ]t0oUhoJaܷ(4:6v
"w%}Z{}p=*rMͯ8pߘ!eU3%Q!2ކ7V>u53W7FDzBbI/ssnbAv.ƾ߁@wEkn&60Jߍ^Q$ɟR6DZ"C^h.'#mlILm4vIBI5)eʅS>q!^fHevv
Uٌ`ӫ)YL%?PK D'\mh 7 ) security_1767775031/eps-301-redirects.php=r7U~˄Tɉ[JX-YQT|)55D`(Zuw?n EJ[f%9h44h|~х>;ǾcC!Dc.&ﱁ-\MBnGپo8U<.ZTt5zk0:CAvU4{/Iw4rjxc(Z^^;k>J8/r:`M7aЍ( G]ĎB|) Ӯ_V]0;bE뉈;ldQct@/~gX.tg={W,;ƚhhumG]a0Ӑs&iC>q@D;^g9Ѕ\;C<l;<dќ)xuv^q.VcϝSw}[V=
DD 1QHϥSL~JÀka,9:иv=9[ >]y-D;:9F?0 [.Qf%^/~*Gߟ~b00/OFgK|Ȏpth.痃c∠|ؔF*T sܾE
pHd#qgAbvGAX=eFN=(ۿ`/Kw
_zAcOv{hG_t_.0m,%SNqp\lH0N+XI:Ǐc&7/ət^j6pp|2Yrϒ,XK;7-BaY;Z iR_!*;ݜ6*]SdSfG6;d3Y8";tPZ`}P&b
˓3 Co:A6HN7v}_pL*ʊkbʞ;4v@eCipXOShM4aZO-8-0-5<XZ,9Y7Z͆V#f#i/46"#k+!<IBr|dS?11YKô/Wv80-ߘHg!R'8fYksG(
y,nӊAc
vL-^(xԬ[6s&lߍV>h6,aq>=ugM<LLiIY.Кؓ9%A~Бbgqm@ûԞQ]=hrc+5R
V5jܯ1$a魖t)}8nUt۵Z6$'rVB5dAo m}X.v1\֤O CQq`Z`s _u4Z4T^4HwC+M
5 4.>"tpy:w%Y,g
|rcjL5cKbCZfdj& q`yȧ5?joϤۋ3s4u?|m7l N5%Nj6^I/sT=Aw?6
A"ןԷkdB*eEb|1Uh+TRd[~f
Y
JUz\ =X!B
I(I~5
MC*EVq'! ~KZqQ#~z]4wX7D}"ZP2n`,:Vu_"ET1q+)@ WKDaW[鈤$d
Ps,VWM6Z┗8NUTX+уbeI.,`mwhqNi:S5 t#hV X[ݍ;7QWAv]D k(ZOyVӜ=/D f3C k&