File: //var/lib/modsecurity/audit/20260210/20260210-1632/20260210-163242-aYuj@bhenDUAADRV5NIAAAAM
--deb93277-A--
[10/Feb/2026:16:32:42 --0500] aYuj@bhenDUAADRV5NIAAAAM 216.26.245.91 58980 127.0.0.190 80
--deb93277-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 216.26.245.91
Host: www.tubethug.com
Connection: close
Content-Length: 5618
Proxy-Connection: Keep-Alive
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1770931946%7CsY8l6Uk5eltbOEdwYGqTRU0yN0z6KrcyUw5712eJLTF%7C65aea52d706130cbd94f076e0dda76875b705ba68a29b02b8ee19645f83245e0; wordpress_logged_in_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1770931946%7CsY8l6Uk5eltbOEdwYGqTRU0yN0z6KrcyUw5712eJLTF%7Cfdd7364af9c3c51fa894d92d9975f57bf67ee8af1f01020f76637b28f9e40c3c; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-1=1770759147; wp-settings-1=posts_list_mode%3Dlist
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.tubethug.com
Referer: http://www.tubethug.com/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=9ec0b336e4504c5e86cfad114b2bb3ae
--deb93277-C--
--9ec0b336e4504c5e86cfad114b2bb3ae
Content-Disposition: form-data; name="_wpnonce"
234a743570
--9ec0b336e4504c5e86cfad114b2bb3ae
Content-Disposition: form-data; name="_wp_http_referer"
/wp-admin/plugin-install.php?tab=upload
--9ec0b336e4504c5e86cfad114b2bb3ae
Content-Disposition: form-data; name="pluginzip"; filename="analytics_1770759155.zip"
Content-Type: application/octet-stream
PK J\R{# " analytics_1770759155/wp-config.phpR]o0}N$bKP2NI{"88XuG=L{εM0YaseIp.1Un%lõ{܌z\<ngTq|^oP@BczO4\?3
MPe 0giShZ & ~dO=V
[eAĕx݈]|ZὮYe[ L4
LE U%\Ith9q ۀR =q ZV
3XLJXozjz\2@FWl
7NaIjɭ_PAހ_X~P{)+TV.E KC,uԷ~
B~d0=]ٙƘ4l z
yW} Bjs>1㋔Kua f{,y:_xr8mZN-(vꖠXTh8u5.CG2Y˿ͥrY gvPK J\:H-% * analytics_1770759155/bottom_1770759157.phpR]o0}N7
#kv+e@BE x8[ L\{εMy?y÷asӼ6\`"%نK
)x\u)5PQ 6/_w:;CMBQpٿJ<ss-Y J<ST)P9)h wTػɃPmUPU LiUʫu*<W<#q-BJ"+cp
&%UY!#
NA`"u&tJ1u0B; i;pdrE5(Z&P둉<iŒDJz_ Wv0]4$D)'M&~Ix
۔Kd|^ru ,LQ@@} }GPu>AQ* :T{Ouwf&1*4 =aU !0ZKɜc/`L"c{] ~ޱ +rsF֭S}JnnԜ pEsD<SYWc"ELZM!8K+\'ČCk ~PK J\JH>
U7 2 analytics_1770759155/advanced-linkflow-control.phpkW۸;BÂ,vVJű~Be٤ޗ,k4K3# s9@Nxh-<֝"G{{xrQ99)8E nu:ɵ?P]aؖ 6 lKf l?=7w"sB o47& ؋ Yp+ h|ta~ E>o1'3c<aM|d
Y #ruQe&mƚ ;NvӺ(s^]v*t^iɗ9Dh{inΰ,:b8E2]CԖFvHmwK% 5>%m8]!hzc5T)=pԧ.BL^ O!n:FRXdz+5zc#H-dnm~`ߡZ*8p`-WkW+⧻uutmy]/]_
q?]$]ry-F'Th~](, PPC2I/ VĀ;g!lN =o0u@ >k+ZoyY[_5MfU|/ѻ ƪxѲ@.W5} `;&
~.olI8ՖX76
fX.z7 Ip-v_Ume5Af
|3-r֍lQ }2mC@6 2d86A)WtmXX]r od/ˠfee('˔Qw[78خ ?lE#;\$JVt `#ϻ
Emoόgl<0jcOȈ @ĨчP4 PaF}WKː#\L'G ] Y }:|Jőʱg 6?$H
<E|%.aYyfϲu~
Е0:H1% )Ҟ
ZJ==OM_5T&TO.|Qu7S:i4A|
kl0
"d/bb>s-*y3F
<xXU2İ l)9i!偉
`"mUرhDyhS% 1ÂA%R 8`T*2E|~
x!) y]{ayF0B쀙6` 0 ^ ♨@F2*EnBpR7''?_*(dnrR*;#rRZ0
azXlVg𫧯l,C љoWY-<`?{M^"OSMЌ <?=2yY `iB31HkR d-@H)?8蟞Qoi{qX%D2>RtlWU?BOjM\GBt46|mJ ; @xs>4x-3
8[č O&ҏ$N@Tq "\k^x:Fdt܋]SL)tDJ^%YYHI M-njֶbμ/E& #z %7CTat RqN Iō ; xnXIQBvw-%&h,Vcy"o8v 't|0 BKddW H[0F)^? #ꈨ@ w cϣҭ;'
>Ewiq[zjpI< eD8/R5:bNj _dZ,G 2Uڧh)?1,8a/
ufc{ ~Hx O9Ĵ) 3GU
RnzC
iԑ"7fG|Jn ґԺIl *bqR p鰽Bfh2R0XR
24>!n(靆>}Y|,.y116/-9c'1[Hā,x-L2N>( ]Ì4Í!Uxz PeߚxPi2٦aI $ W>.@x7L#7qksj+WQj 5ՑJHqp pZǰX[M*d?۷g>yab+Izip7fv
Ja&
1j4
H
9 sɍ$trO[I0(9]Okى{E}42;o\ӳZUl+ 9ݫ`(% #Gmi' & *|
<ɡc LB.ΎNPyr+P d`]䫁
7Z÷u$$]3-!+]mH(xXlɍ%:D`> "{̼8A$HW@ H)+ C $$&iD: ĸqiFMF8' {md?v`] ѓ[ >T,bR5W $Ʌp9 P~dգ٬;c|dFኔrUY^tBz\([霉3o3TU*Y7(uA9*, V*G\ɐJq^Wr^ ɗVӏBx
m1b>fzxS\\8їgn+LvӬ/m@&,Tmu{߿x=2C 9_I`Hah:9ɧcrPtn|:I:3Vu8fI<%LJarv(0&d8>aں̃sge'7]˛h:
* iNG:
͠ug KB
sI4_c=;'&,"e@J8dCzٖw١>rϴ
W4yš˨;\AY$˗/BTMiVk.,I]#-c3T }MM!@URԕ`]گ! R*t@arO%kyD vOXAֺ]s]ʤ|_Ol+G: w,V]Twa܄Glahk ɿm}I&i DZDxydDžfM275FWQϻ Z ) T[ ]ϧ<~siK?,7y]wwRMbvg!R1uNP|>gk_ٚRdͿij&Ě7K-#-1 PK J\R{# " analytics_1770759155/wp-config.phpPK J\:H-% * c analytics_1770759155/bottom_1770759157.phpPK J\JH>
U7 2 analytics_1770759155/advanced-linkflow-control.phpPK
--9ec0b336e4504c5e86cfad114b2bb3ae
Content-Disposition: form-data; name="install-plugin-submit"
Install Now
--9ec0b336e4504c5e86cfad114b2bb3ae--
--deb93277-I--
%5fwpnonce=234a743570&%5fwp%5fhttp%5freferer=%2fwp%2dadmin%2fplugin%2dinstall%2ephp%3ftab%3dupload&install%2dplugin%2dsubmit=Install+Now
--deb93277-F--
HTTP/1.1 500 Internal Server Error
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 2798
Connection: close
Content-Type: text/html; charset=utf-8
--deb93277-E--
--deb93277-H--
Stopwatch: 1770759161731411 507677 (- - -)
Stopwatch2: 1770759161731411 507677; combined=100, p1=68, p2=15, p3=14, p4=0, p5=2, sr=43, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--deb93277-Z--